Moderate Security Update for kernel-rt: Addressing Use-After-Free Vulnerabilities
Summary
ALSA-2025:15009: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.72.1.rt7.413.el8_10. Fixed in 4.18.0-553.72.1.rt7.413.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel, designed for systems that require high determinism and fine-tuning for performance. It is essential for applications that demand precise timing and responsiveness. However, like any software, it is susceptible to vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
This vulnerability arises from two specific use-after-free issues within the kernel-rt package. The first issue, identified as CVE-2025-38211, involves the RDMA/iwcm component, where work objects can be accessed after their associated cm_id has been destroyed. The second issue, CVE-2025-38464, pertains to the tipc_conn_close() function, which also suffers from a use-after-free condition. These vulnerabilities can lead to potential system crashes or unauthorized access, making it critical for users to address them promptly.
How To Fix
Minimum fixed version
4.18.0-553.72.1.rt7.413.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The kernel-rt package has been identified with moderate security vulnerabilities that require immediate attention. Users are advised to update to the latest patched version to ensure system integrity and security. Regular updates and monitoring for vulnerabilities are essential practices for maintaining a secure environment.
See every vulnerability recorded for kernel-rt →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to crashes or exploitation.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Failing to address this vulnerability may result in system instability, crashes, or unauthorized access to sensitive data.
The kernel-rt package is particularly critical for systems that require real-time processing capabilities, such as those used in industrial automation or telecommunications.
It is recommended to regularly check for updates and apply them promptly, ideally as part of a routine maintenance schedule.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
