Critical Vulnerability in kernel-rt Package: Important Security and Bug Fix Update
Summary
ALSA-2026:36049: Important: kernel-rt security, bug fix, and enhancement update. Affects kernel-rt versions < 4.18.0-553.139.1.rt7.480.el8_10. Fixed in 4.18.0-553.139.1.rt7.480.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, which is designed for systems requiring high determinism and low latency. This package is crucial for applications in fields such as telecommunications, robotics, and real-time data processing. The kernel-rt package is part of the AlmaLinux ecosystem, which focuses on providing a stable and secure operating environment for enterprise applications.
Vulnerability Detail
The kernel-rt package has been identified with several critical vulnerabilities that could lead to severe security risks. These include a use-after-free vulnerability in the iscsi connection handling (CVE-2026-23216), a use-after-free in the gfs2 file system's inline data write path (CVE-2026-45984), and a double free issue in the RDMA pvrdma context allocation (CVE-2026-46189). These vulnerabilities can potentially allow an attacker to execute arbitrary code, leading to system crashes or unauthorized access.
How To Fix
Minimum fixed version
4.18.0-553.139.1.rt7.480.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected components or disable the specific functionalities that rely on the vulnerable parts of the kernel. However, this is not a permanent solution and should only be used until the package can be updated.
Conclusion
The kernel-rt package has critical vulnerabilities that require immediate attention. Users should update to the latest patched version to protect their systems from potential exploitation. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for kernel-rt →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to arbitrary code execution.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Failure to update the kernel-rt package may expose your system to exploitation through the identified vulnerabilities, potentially leading to data breaches or system instability.
Yes, you can set up a cron job to regularly check for updates and apply them automatically, ensuring your system remains secure.
If you experience problems after updating, you can revert to the previous version of the kernel-rt package using the command 'sudo dnf downgrade kernel-rt'.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
