Moderate Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:9581: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.58.1.rt7.399.el8_10. Fixed in 4.18.0-553.58.1.rt7.399.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel designed for systems requiring high determinism. It is essential for applications where timing and responsiveness are critical, such as in industrial automation, telecommunications, and real-time data processing. The kernel-rt package is part of the AlmaLinux ecosystem, which is a community-driven, open-source operating system that is binary-compatible with Red Hat Enterprise Linux.
Vulnerability Detail
This security update addresses multiple vulnerabilities in the kernel-rt package, including a double free race condition in the CIFS file system (CVE-2022-48919), a slab-out-of-bounds issue in key task permissions (CVE-2024-50301), an error path fix in the IDPF driver (CVE-2024-53064), and the need for RCU protection in the NDISC allocation function (CVE-2025-21764). These vulnerabilities could lead to system crashes, unauthorized access, or data corruption, posing significant risks to system integrity and security.
How To Fix
Minimum fixed version
4.18.0-553.58.1.rt7.399.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider disabling the affected services or functionalities that rely on the vulnerable components until the update can be applied. Additionally, ensure that your system is monitored for any unusual activity that may indicate exploitation attempts.
Conclusion
In summary, the kernel-rt security update addresses critical vulnerabilities that could compromise system integrity and security. It is crucial to update to the latest patched version to mitigate these risks. For ongoing monitoring of open-source vulnerabilities, consider using Vulert, which can alert you in real-time without requiring code access.
See every vulnerability recorded for kernel-rt →
FAQ
Kernel-rt is a Real Time Linux Kernel package that provides enhanced scheduling and timing capabilities for applications requiring high determinism.
The vulnerabilities could lead to system crashes, unauthorized access, or data corruption, which can severely impact system performance and security.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
It is not recommended to continue using the affected version as it poses security risks. Updating to the patched version is essential.
If immediate updating is not possible, consider disabling the affected services and monitoring your system for any suspicious activity.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
