Important: kernel-rt security and bug fix update
Summary
ALSA-2023:2148: Important: kernel-rt security and bug fix update. Affects kernel-rt versions < 5.14.0-284.11.1.rt14.296.el9_2. Fixed in 5.14.0-284.11.1.rt14.296.el9_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Vulnerability Detail
This update addresses multiple security vulnerabilities in the kernel-rt package. These vulnerabilities include use-after-free, race conditions, memory leaks, NULL pointer dereferences, and buffer overflows. Exploiting these vulnerabilities could lead to privilege escalation, denial of service, information leaks, or arbitrary code execution.
How To Fix
Minimum fixed version
5.14.0-284.11.1.rt14.296.el9_2
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This update addresses multiple security vulnerabilities in the kernel-rt package. It is recommended to update to the latest version to mitigate the risks associated with these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for kernel-rt →
FAQ
These vulnerabilities could allow an attacker to gain elevated privileges, cause denial of service, leak sensitive information, or execute arbitrary code.
No specific workarounds are mentioned in the advisory. It is recommended to update to the latest version of the kernel-rt package.
There is no information provided in the advisory regarding active exploitation of these vulnerabilities.
The impact of these vulnerabilities may vary, but in some cases, remote exploitation is possible.
For more details about each vulnerability, including the CVSS score, acknowledgments, and related information, refer to the CVE pages listed in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
