Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:27354: Important: kernel-rt security, bug fix, and enhancement update. Affects kernel-rt versions < 4.18.0-553.136.1.rt7.477.el8_10. Fixed in 4.18.0-553.136.1.rt7.477.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems requiring high determinism. It is essential for applications where timing and performance are critical. This package is widely used in environments such as telecommunications, industrial automation, and real-time data processing. However, it is susceptible to various vulnerabilities that can lead to system instability and security breaches.
Vulnerability Detail
The kernel-rt package has several vulnerabilities, including a use-after-free issue in the bonding driver that can lead to denial of service (CVE-2026-31419). Other vulnerabilities include improper handling of mode changes in the AMD display driver (CVE-2026-31488) and a use-after-free in the mana driver (CVE-2026-43056). These vulnerabilities can allow attackers to exploit the system, potentially leading to crashes or unauthorized access.
How To Fix
Minimum fixed version
4.18.0-553.136.1.rt7.477.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can limit the use of the affected drivers or disable certain features in the kernel that are known to be vulnerable until the system can be updated. However, this is not a permanent solution and should only be used until the patch is applied.
Conclusion
The kernel-rt package is crucial for real-time applications but is currently affected by several vulnerabilities that pose significant risks. It is imperative to update to the latest patched version to ensure system security and stability. Users should also consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package is a Real Time Linux Kernel designed for applications that require high performance and low latency.
The vulnerabilities can lead to system crashes, denial of service, and unauthorized access to sensitive data.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If an immediate update is not possible, consider implementing workarounds such as limiting the use of affected drivers.
For more details, refer to the CVE pages listed in the advisory or the official documentation of the kernel-rt package.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
