Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:13961: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.70.1.rt7.411.el8_10. Fixed in 4.18.0-553.70.1.rt7.411.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel-rt package provides a Real Time Linux Kernel, designed for systems that require high determinism and low latency. It is essential for applications where timing is critical, such as industrial automation and real-time data processing. However, recent vulnerabilities have been identified that could compromise system integrity and security.
Vulnerability Detail
The kernel-rt package has been found to contain multiple vulnerabilities, including a use-after-free issue in the drm/vkms subsystem (CVE-2025-22097), a double list addition in the net_sched component (CVE-2025-37914), and a use-after-free in the Bluetooth hci_core module (CVE-2025-38250). These vulnerabilities can lead to system crashes, unauthorized access, or exploitation by malicious actors, posing significant risks to system stability and data security.
How To Fix
Minimum fixed version
4.18.0-553.70.1.rt7.411.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the affected components or limit their use until the package is updated. However, this is not a permanent solution and updating the package is strongly advised.
Conclusion
The kernel-rt package has critical vulnerabilities that need immediate attention. Updating to the latest patched version is essential to maintain system security and integrity. Users are encouraged to monitor their systems and apply updates promptly.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel optimized for applications requiring high determinism and low latency.
The vulnerabilities can lead to system crashes, unauthorized access, or exploitation, compromising system integrity and security.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without requiring signup.
Consider disabling the affected components or limiting their use until you can perform the update. However, this is not a permanent fix.
Detailed information about the vulnerabilities can be found on the CVE pages: CVE-2025-22097, CVE-2025-37914, and CVE-2025-38250.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
