Moderate Security Vulnerability in kernel-rt Package: Bluetooth and Memory Management Issues
Summary
ALSA-2025:19103: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.81.1.rt7.422.el8_10. Fixed in 4.18.0-553.81.1.rt7.422.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, which is designed for systems requiring high determinism and low latency. This package is crucial for applications in fields such as telecommunications, robotics, and industrial automation, where precise timing and responsiveness are essential. However, the kernel-rt package is susceptible to various security vulnerabilities that can compromise system integrity and performance.
Vulnerability Detail
The kernel-rt package has been identified with multiple vulnerabilities, including a 'bad unlock balance' in Bluetooth L2CAP, slab-out-of-bounds issues in efivarfs, and potential use-after-free scenarios in Bluetooth key management. These vulnerabilities can lead to system crashes, unauthorized access, or data corruption, posing significant risks to system stability and security. The vulnerabilities stem from improper memory management and handling of Bluetooth connections, which can be exploited by attackers to execute arbitrary code or disrupt services.
How To Fix
Minimum fixed version
4.18.0-553.81.1.rt7.422.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable Bluetooth functionality if it is not required for their applications. This can be done by executing the command:
sudo systemctl stop bluetooth.service' and 'sudo systemctl disable bluetooth.service
However, this is not a permanent solution and updating the package is recommended.
Conclusion
The kernel-rt package has been identified with several moderate security vulnerabilities that can impact system performance and security. It is crucial for users to update to the latest patched version to mitigate these risks. Temporary workarounds are available, but they do not replace the need for a proper update.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel optimized for applications requiring high determinism and low latency.
The vulnerabilities include issues related to Bluetooth management and memory handling, which can lead to system crashes and unauthorized access.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file. Visit Vulert Scanner to check your application without needing to sign up.
As a temporary workaround, you can disable Bluetooth services on your system until you can apply the necessary updates.
Failing to address these vulnerabilities can lead to system instability, data corruption, and potential unauthorized access to sensitive information.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
