Critical Security Update for kernel-rt Package: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:55765: Important: kernel-rt security, bug fix, and enhancement update. Affects kernel-rt versions < 4.18.0-553.156.1.rt7.497.el8_10. Fixed in 4.18.0-553.156.1.rt7.497.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel designed for systems requiring high determinism. It is essential for applications where timing and performance are critical, such as in industrial automation and real-time data processing. The kernel-rt package is part of the AlmaLinux ecosystem, which aims to provide a stable and secure environment for enterprise applications.
Vulnerability Detail
The kernel-rt package has been identified with multiple vulnerabilities, including potential out-of-bounds writes, arbitrary code execution, and improper memory management. These vulnerabilities stem from flaws in the kernel's memory management and graphics drivers, which could lead to system crashes, privilege escalation, and unauthorized access to sensitive data. The vulnerabilities are tracked under several CVEs, including CVE-2025-39902 and CVE-2026-17523, indicating a significant risk to system integrity and security.
How To Fix
Minimum fixed version
4.18.0-553.156.1.rt7.497.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected components or disable certain features of the kernel-rt package until the update is applied. However, it is strongly recommended to apply the patch as soon as possible to ensure system security.
Conclusion
The kernel-rt package has critical vulnerabilities that pose significant risks to system security. It is essential to update to the latest patched version to protect against potential exploits. Users should remain vigilant and utilize tools like Vulert to monitor their applications for vulnerabilities.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel optimized for applications requiring high performance and low latency.
Multiple vulnerabilities have been identified, including out-of-bounds writes and arbitrary code execution, which could lead to privilege escalation.
You can use Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
Update the kernel-rt package to the latest version using 'sudo dnf update kernel-rt' to mitigate the vulnerabilities.
While limiting access to affected components may serve as a temporary workaround, applying the patch is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
