Security Update for Real Time Linux Kernel: kernel-rt Vulnerability Mitigation
Summary
ALSA-2025:17398: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.78.1.rt7.419.el8_10. Fixed in 4.18.0-553.78.1.rt7.419.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel designed for systems requiring high determinism. It is optimized for performance in real-time applications, making it crucial for industries like telecommunications and automation. However, vulnerabilities in this package can lead to severe security risks, impacting system stability and data integrity.
Vulnerability Detail
The vulnerability arises from a use-after-free issue in the SMB client (CVE-2025-38527) and inadequate filehandle bounds checking in NFS (CVE-2025-39730). These flaws could allow an attacker to exploit memory management errors, potentially leading to unauthorized access or system crashes. The vulnerabilities were introduced in earlier versions of the kernel-rt package and have been addressed in the latest patch.
How To Fix
Minimum fixed version
4.18.0-553.78.1.rt7.419.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected services or disable the SMB and NFS functionalities until the package is updated. This can be done by modifying the configuration files or using firewall rules to restrict access.
Conclusion
The kernel-rt package has a critical vulnerability that requires immediate attention. By updating to the latest patched version, users can protect their systems from potential exploits. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package is a Real Time Linux Kernel that provides enhanced performance for applications requiring high determinism.
Exploiting these vulnerabilities could lead to unauthorized access, system crashes, or data corruption.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Yes, you can limit access to the affected services or disable SMB and NFS functionalities as a temporary workaround.
It is recommended to regularly check for and apply updates to your packages to ensure security and stability.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
