Moderate Security Update for kernel-rt: Memory Accounting Leak Vulnerability
Summary
ALSA-2025:14439: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.71.1.rt7.412.el8_10. Fixed in 4.18.0-553.71.1.rt7.412.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, which is designed for systems requiring high determinism. This kernel variant is optimized for real-time applications, allowing for precise timing and control over system resources. However, like any software, it is susceptible to vulnerabilities that can compromise system integrity and performance.
Vulnerability Detail
The vulnerability identified as CVE-2025-22058 is a memory accounting leak in the kernel's UDP implementation. This flaw could allow an attacker to exploit the memory management system, potentially leading to unauthorized access or system instability. The leak occurs due to improper handling of memory allocations, which can be exploited in scenarios where memory usage is critical, affecting the overall performance and security of the system.
How To Fix
Minimum fixed version
4.18.0-553.71.1.rt7.412.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workaround is provided for this vulnerability. The best course of action is to apply the security update as soon as it is available.
Conclusion
The kernel-rt security update addresses a critical memory accounting leak vulnerability that could impact system performance and security. It is essential to update to the patched version to safeguard against potential exploits.
See every vulnerability recorded for kernel-rt →
FAQ
CVE-2025-22058 is a vulnerability in the kernel-rt packages that involves a memory accounting leak in the UDP implementation.
Kernel-rt packages provide a Real Time Linux Kernel optimized for applications that require high precision and low latency.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
While there is no specific workaround, it is crucial to plan for an update as soon as possible to mitigate the risk associated with this vulnerability.
For more details, refer to the CVE page associated with CVE-2025-22058 or the advisory provided by AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
