Critical Security Update for Real Time Linux Kernel: kernel-rt Vulnerability
Summary
ALSA-2025:7532: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.52.1.rt7.393.el8_10. Fixed in 4.18.0-553.52.1.rt7.393.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel designed for systems that require high determinism and low latency. It is particularly useful in environments such as industrial automation, telecommunications, and real-time data processing. This kernel variant allows for fine-tuning of system performance to meet stringent timing requirements, making it essential for applications where timing is critical.
Vulnerability Detail
This vulnerability stems from two identified security issues: CVE-2022-49011, which involves a reference count leak in the coretemp hardware monitoring driver, and CVE-2024-53141, which pertains to a missing range check in the bitmap_ip_uadt function of the netfilter ipset. These vulnerabilities could potentially allow an attacker to exploit the system, leading to unauthorized access or system instability. The ramifications include the risk of privilege escalation and denial of service, which could severely impact system reliability and security.
How To Fix
Minimum fixed version
4.18.0-553.52.1.rt7.393.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users may consider disabling the affected features of the kernel or using alternative kernel configurations that do not rely on the vulnerable components until the update can be applied. However, this is not a permanent solution and should only be used as a stopgap.
Conclusion
The kernel-rt security update addresses critical vulnerabilities that could compromise system integrity and performance. Users are strongly advised to update their packages to the latest version to mitigate these risks. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for kernel-rt →
FAQ
CVE-2022-49011 is a vulnerability related to a reference count leak in the coretemp hardware monitoring driver, which could lead to potential system instability.
CVE-2024-53141 refers to a missing range check in the bitmap_ip_uadt function of the netfilter ipset, which could allow unauthorized access to system resources.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If immediate updates are not possible, consider disabling the affected features or using alternative configurations as a temporary workaround until the update can be applied.
For detailed information about the vulnerabilities, including their impact and technical details, refer to the CVE pages linked in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
