Critical Security Update for Real Time Linux Kernel Packages: kernel-rt
Summary
ALSA-2025:10670: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.60.1.rt7.401.el8_10. Fixed in 4.18.0-553.60.1.rt7.401.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide a Real Time Linux Kernel, designed for systems that require high determinism and low latency. These packages are essential for applications where timing is critical, such as in industrial automation, telecommunications, and real-time data processing. The kernel-rt packages include various components like kernel-rt-core, kernel-rt-debug, and their respective development packages, all of which are susceptible to security vulnerabilities that could compromise system integrity and performance.
Vulnerability Detail
The vulnerability affects the kernel-rt packages due to multiple security flaws, including a use-after-free issue in Bluetooth handling (CVE-2022-49111), a command queuing problem when HCI_UNREGISTER is set (CVE-2022-49136), and a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846). These vulnerabilities could allow an attacker to exploit the system, potentially leading to unauthorized access, data corruption, or system crashes.
How To Fix
Minimum fixed version
4.18.0-553.60.1.rt7.401.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable Bluetooth functionality if it is not required for their applications. This can be done by executing the command
sudo systemctl stop bluetooth' to stop the Bluetooth service.
Conclusion
The kernel-rt packages are critical for systems requiring real-time processing capabilities. The identified vulnerabilities pose significant risks, and it is crucial to apply the recommended updates promptly to safeguard system integrity. Utilizing tools like Vulert can help maintain awareness of potential vulnerabilities in your software.
See every vulnerability recorded for kernel-rt →
FAQ
Failure to update may leave the system vulnerable to exploitation, leading to potential data breaches or system instability.
You can use Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
A use-after-free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed, potentially allowing an attacker to manipulate the program's execution.
While specific exploits may not be publicly available, the nature of these vulnerabilities suggests that they could be leveraged by attackers to gain unauthorized access or disrupt services.
It is recommended to check for updates regularly, ideally weekly or bi-weekly, to ensure that your system is protected against the latest vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
