Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:0443: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.92.1.rt7.433.el8_10. Fixed in 4.18.0-553.92.1.rt7.433.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems that require high determinism and fine-tuning for performance. It is essential for applications that demand real-time processing capabilities, such as industrial automation and telecommunications. However, vulnerabilities in this package can lead to severe security risks, including system crashes and unauthorized access.
Vulnerability Detail
The kernel-rt package has been identified with several vulnerabilities that could lead to critical security issues. Specifically, CVE-2025-39993 addresses race conditions in the media remote control subsystem, CVE-2025-40240 prevents NULL dereferences when chunk data buffers are missing, and CVE-2025-68285 fixes a potential use-after-free scenario in the Ceph library. These vulnerabilities can result in system instability, data corruption, and unauthorized access to sensitive information.
How To Fix
Minimum fixed version
4.18.0-553.92.1.rt7.433.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may consider disabling the affected features of the kernel-rt package until the update can be applied. However, this is not a permanent solution and should only be used as a stopgap measure.
Conclusion
The kernel-rt package has critical vulnerabilities that need immediate attention. Updating to the latest version is essential to protect your system from potential threats. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package has vulnerabilities related to race conditions, NULL dereferences, and potential use-after-free scenarios, which can lead to system instability and security breaches.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By simply uploading your manifest file like package-lock.json, you can check for vulnerabilities in real-time.
It is highly recommended to update your kernel-rt package to the latest patched version (4.18.0-553.92.1.rt7.433.el8_10) to ensure your system is secure.
While a temporary workaround may involve disabling certain features, it is not a permanent solution. Updating to the patched version is the best course of action.
For detailed information, refer to the CVE pages associated with the vulnerabilities: CVE-2025-39993, CVE-2025-40240, and CVE-2025-68285.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
