Critical Vulnerability in kernel-rt Package: Important Security and Bug Fix Update
Summary
ALSA-2026:36348: Important: kernel-rt security, bug fix, and enhancement update. Affects kernel-rt versions < 4.18.0-553.140.1.rt7.481.el8_10. Fixed in 4.18.0-553.140.1.rt7.481.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems requiring high determinism. It allows for fine-tuning of system performance, making it essential for applications where timing is critical. However, vulnerabilities in this package can lead to severe security risks, including privilege escalation and information disclosure.
Vulnerability Detail
The kernel-rt package has multiple vulnerabilities, including a potential race condition in tcp_v6_syn_recv_sock, an out-of-bounds read in nfnetlink_cthelper_dump_table, and issues with SCTP message handling. These vulnerabilities could allow attackers to exploit system resources, leading to unauthorized access or system crashes. The vulnerabilities are tracked under CVEs such as CVE-2025-10263 and CVE-2026-43198, among others.
How To Fix
Minimum fixed version
4.18.0-553.140.1.rt7.481.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected services or implement firewall rules to mitigate exposure until the package is updated. However, this is not a substitute for applying the patch.
Conclusion
The kernel-rt package has critical vulnerabilities that require immediate attention. Users are advised to update to the latest patched version to mitigate risks. Regular monitoring and vulnerability management are essential to maintain system security.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel, optimized for systems that require precise timing and high performance.
The vulnerabilities can lead to privilege escalation, unauthorized access, and potential system crashes, posing significant security risks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider implementing temporary workarounds such as limiting access to affected services or applying firewall rules.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the advisory, which provide insights into the impact and technical details.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
