Moderate Security Update for kernel-rt: Addressing CVE-2022-50228 and CVE-2023-53305
Summary
ALSA-2025:17812: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.79.1.rt7.420.el8_10. Fixed in 4.18.0-553.79.1.rt7.420.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel, designed for systems requiring high determinism. It enables fine-tuning of system performance for applications that demand precise timing and responsiveness. This package is essential for real-time applications in fields such as telecommunications, industrial automation, and robotics. However, like any software, it is susceptible to vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
The vulnerabilities identified in the kernel-rt package stem from two main issues: CVE-2022-50228, which involves a flaw in the KVM (Kernel-based Virtual Machine) that could lead to unexpected behavior when userspace injects an interrupt with GIF=0, and CVE-2023-53305, a use-after-free vulnerability in the Bluetooth L2CAP protocol. These vulnerabilities could potentially allow an attacker to execute arbitrary code, leading to system crashes or unauthorized access to sensitive data.
How To Fix
Minimum fixed version
4.18.0-553.79.1.rt7.420.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the exposure of their systems by disabling the affected services or features until the package is updated. For instance, if Bluetooth functionality is not critical, it can be disabled to mitigate the risk associated with CVE-2023-53305.
Conclusion
In summary, the kernel-rt package has been identified with moderate severity vulnerabilities that require immediate attention. Updating to the latest patched version is crucial to maintain system security and integrity. Users are encouraged to apply the recommended fixes and consider using tools like Vulert for ongoing monitoring of vulnerabilities in their applications.
See every vulnerability recorded for kernel-rt →
FAQ
Kernel-rt is a Real Time Linux Kernel package that allows for high precision and responsiveness in computing tasks, essential for real-time applications.
CVE-2022-50228 is a vulnerability related to KVM that could lead to unexpected behavior, while CVE-2023-53305 is a use-after-free vulnerability in Bluetooth L2CAP.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file, you can check for vulnerabilities without needing to install any software.
If an immediate update is not possible, consider disabling the affected features or services as a temporary workaround to reduce risk.
Detailed information about the vulnerabilities can be found on the CVE pages for CVE-2022-50228 and CVE-2023-53305, as well as in the advisories from AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
