Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:13590: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.69.1.rt7.410.el8_10. Fixed in 4.18.0-553.69.1.rt7.410.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel designed for systems requiring high determinism. This package is essential for applications that demand precise timing and low-latency processing. However, recent vulnerabilities have been identified that could compromise system security and stability, necessitating immediate attention and remediation.
Vulnerability Detail
The kernel-rt package has several vulnerabilities, including a use-after-free issue in padata_reorder (CVE-2025-21727), an extended RCU protection issue in igmp6_send() (CVE-2025-21759), and a race condition in huge_pmd_unshare() (CVE-2025-38085). These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system integrity and security.
How To Fix
Minimum fixed version
4.18.0-553.69.1.rt7.410.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can limit the use of the affected functionalities until the package is updated. However, it is strongly recommended to apply the patch as soon as possible to mitigate the risks associated with these vulnerabilities.
Conclusion
The kernel-rt package has critical vulnerabilities that need immediate attention. Updating to the latest patched version is essential to maintain system security and integrity. Users are encouraged to utilize tools like Vulert for ongoing monitoring of vulnerabilities in their applications.
See every vulnerability recorded for kernel-rt →
FAQ
kernel-rt is a Real Time Linux Kernel package that provides enhanced timing and processing capabilities for applications requiring high determinism.
The vulnerabilities include use-after-free issues, race conditions, and buffer overflow risks that could lead to unauthorized access or system instability.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities. Visit Vulert Scanner to check if your application is affected without any signup.
If immediate updates are not possible, consider limiting the use of the affected functionalities until the patch can be applied.
Detailed information about the vulnerabilities can be found on the CVE pages associated with each identified issue.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
