Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:25120: Critical: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.132.1.rt7.473.el8_10. Fixed in 4.18.0-553.132.1.rt7.473.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel-rt package provides the Real Time Linux Kernel, which is designed for systems that require high determinism and low latency. It is essential for applications that demand precise timing and responsiveness, such as audio processing, robotics, and real-time data processing. However, this package is susceptible to various vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
The kernel-rt package has been identified with multiple vulnerabilities, including use-after-free errors, out-of-bounds reads, and potential double frees. These vulnerabilities can lead to system crashes, unauthorized access, and data corruption. Specifically, issues like CVE-2025-21858 and CVE-2023-53781 highlight critical flaws in memory management that can be exploited by attackers to execute arbitrary code or cause denial-of-service conditions.
How To Fix
Minimum fixed version
4.18.0-553.132.1.rt7.473.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of affected services or disable specific functionalities that rely on the vulnerable components until the patch is applied. However, this is not a permanent solution and should only be used until the update can be performed.
Conclusion
The kernel-rt package has critical vulnerabilities that need immediate attention. Updating to the latest patched version is essential to maintain system security and integrity. Users are encouraged to monitor their systems for vulnerabilities and apply updates promptly.
See every vulnerability recorded for kernel-rt →
FAQ
Kernel-rt is a Real Time Linux Kernel package that allows for high precision and low latency in processing tasks, making it suitable for real-time applications.
The vulnerabilities can lead to system crashes, unauthorized access, and potential data loss, posing significant risks to system integrity and security.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without requiring signup.
Yes, temporarily limiting the use of affected services or disabling certain functionalities can help mitigate risks until the patch is applied.
If an immediate update is not possible, ensure that your system is as secure as possible by restricting access to vulnerable services and monitoring for any suspicious activity.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
