Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:59737: Important: kernel-rt security, bug fix, and enhancement update. Affects kernel-rt versions < 4.18.0-553.158.1.rt7.499.el8_10. Fixed in 4.18.0-553.158.1.rt7.499.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel designed for systems requiring high determinism. It is essential for applications that demand precise timing and responsiveness, such as industrial automation and real-time data processing. This package is part of the AlmaLinux ecosystem, which focuses on providing a stable and secure operating environment. The recent vulnerabilities identified in kernel-rt could potentially compromise system integrity and performance, making timely updates crucial.
Vulnerability Detail
The kernel-rt package has been found to contain several vulnerabilities, including issues with SCTP handling, CHAP_R length validation, and race conditions in netfilter. These vulnerabilities can lead to unauthorized access, system crashes, and potential data leaks. Specifically, CVE-2026-52924 addresses stale COOKIE-ECHO handling, while CVE-2026-63886 focuses on improper validation before base64 decoding. The ramifications of these vulnerabilities can be severe, affecting system stability and security.
How To Fix
Minimum fixed version
4.18.0-553.158.1.rt7.499.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for these vulnerabilities. The best course of action is to apply the available updates as soon as possible.
Conclusion
The kernel-rt package has critical vulnerabilities that require immediate attention. Updating to the latest patched version is essential to maintain system security and stability. Users are encouraged to regularly check for updates and utilize tools like Vulert to monitor vulnerabilities in their applications.
See every vulnerability recorded for kernel-rt →
FAQ
kernel-rt is a Real Time Linux Kernel package that allows for fine-tuning of systems requiring high determinism.
Failure to update kernel-rt may leave your system vulnerable to security breaches, crashes, and data leaks.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Check your application against the vulnerabilities using the Vulert playground at Vulert Scanner.
While updates are generally safe, it is always recommended to back up your data before performing system updates.
If you experience problems after updating, consider rolling back to the previous version or seeking assistance from the AlmaLinux community.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
