Critical Security Update for Real Time Linux Kernel: kernel-rt Vulnerability
Summary
ALSA-2025:8057: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.53.1.rt7.394.el8_10. Fixed in 4.18.0-553.53.1.rt7.394.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel designed for systems requiring high determinism. It enables fine-tuning for performance-critical applications, ensuring low-latency processing. This package is essential for industries where timing is crucial, such as telecommunications and robotics. However, vulnerabilities in this package can lead to severe security risks, affecting system stability and data integrity.
Vulnerability Detail
The kernel-rt package has several vulnerabilities that could be exploited by attackers. Notably, CVE-2024-40906 allows health timers to remain active during driver removal, potentially leading to system instability. CVE-2024-44970 involves an invalid linked list unlink in the mlx5e driver, which could be exploited to cause a denial of service. Additionally, CVE-2025-21756 pertains to the vsock implementation, where sockets may not be properly destroyed, leading to resource leaks. These vulnerabilities could allow attackers to disrupt services, gain unauthorized access, or cause system crashes.
How To Fix
Minimum fixed version
4.18.0-553.53.1.rt7.394.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can disable the affected drivers or services until the update is applied. This may help mitigate the risk of exploitation while you prepare to patch your system.
Conclusion
The kernel-rt package is critical for systems requiring real-time processing. However, recent vulnerabilities pose significant risks that can compromise system integrity. It is essential to apply the available patches promptly and consider using tools like Vulert to monitor for vulnerabilities in your software.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel optimized for applications that require high performance and low latency.
Exploiting these vulnerabilities can lead to system crashes, unauthorized access, and denial of service, severely impacting system reliability.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
Yes, temporarily disabling the affected drivers or services can help reduce the risk of exploitation until you can apply the patch.
It is recommended to regularly check for updates and apply them promptly to ensure your system is protected against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
