Moderate Security Vulnerability in kernel-rt Package: Multiple CVEs Addressed
Summary
ALSA-2024:10944: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.32.1.rt7.373.el8_10. Fixed in 4.18.0-553.32.1.rt7.373.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems requiring high determinism. It is crucial for applications where timing and performance are critical, such as in embedded systems and real-time processing environments. This package allows fine-tuning of the kernel to meet specific performance needs, but it is also susceptible to various security vulnerabilities that can compromise system integrity and reliability.
Vulnerability Detail
The kernel-rt package has been identified with several vulnerabilities, including permission bypass in the inode_setsecctx hook (CVE-2024-46695), potential underflow in qdisc_pkt_len_init() (CVE-2024-49949), and various kernel crashes and information leaks. These vulnerabilities can lead to unauthorized access, system crashes, and exposure of sensitive information, posing significant risks to system security and stability.
How To Fix
Minimum fixed version
4.18.0-553.32.1.rt7.373.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider limiting access to sensitive system components and monitoring system logs for unusual activity until the update can be applied.
Conclusion
The kernel-rt package has several vulnerabilities that pose risks to system security and stability. It is essential to update to the latest patched version to mitigate these risks. Users should also consider using tools like Vulert to monitor their applications for vulnerabilities.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package is a Real Time Linux Kernel that provides enhanced performance and determinism for systems requiring precise timing.
The vulnerabilities can lead to unauthorized access, system crashes, and potential exposure of sensitive information, compromising system security.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
Yes, you can limit access to sensitive components and monitor system logs for unusual activities as a temporary measure.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the security advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
