Critical Security Update for kernel-rt Package: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:11299: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.62.1.rt7.403.el8_10. Fixed in 4.18.0-553.62.1.rt7.403.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel, designed for systems that require high determinism and low latency. It is essential for applications that demand precise timing and responsiveness, such as real-time data processing and control systems. However, the kernel-rt package has been found to contain several vulnerabilities that could compromise system security and stability.
Vulnerability Detail
The vulnerabilities in the kernel-rt package stem from various sources, including potential buffer overflows, use-after-free errors, and out-of-bounds access. These issues can lead to system crashes, unauthorized access, or data corruption. Specifically, vulnerabilities such as CVE-2022-49058 and CVE-2025-22004 highlight the risks associated with improper handling of memory and resources, which could be exploited by malicious actors to gain control over affected systems.
How To Fix
Minimum fixed version
4.18.0-553.62.1.rt7.403.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
While waiting for the update, users can mitigate risks by disabling the affected services or applying temporary configurations that limit exposure to the vulnerabilities. However, the most effective solution remains to update the package as soon as possible.
Conclusion
The kernel-rt package has been identified with multiple vulnerabilities that pose significant risks to system security. It is imperative for users to update to the latest patched version to mitigate these risks effectively. Regular monitoring and updates are essential to maintain system integrity.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel, optimized for applications that require high precision and low latency.
Several vulnerabilities have been identified, including buffer overflows and use-after-free errors, which could lead to system instability or unauthorized access.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
Update the kernel-rt package to version 4.18.0-553.62.1.rt7.403.el8_10 by running 'sudo dnf update kernel-rt' in your terminal.
Yes, you can temporarily disable affected services or apply configurations to limit exposure, but updating the package is the best solution.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
