Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:0760: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.94.1.rt7.435.el8_10. Fixed in 4.18.0-553.94.1.rt7.435.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel designed for systems requiring high determinism. It is essential for applications that demand precise timing and responsiveness. This package is crucial in environments like industrial automation, telecommunications, and real-time data processing. However, it has been identified with several vulnerabilities that could compromise system integrity and security.
Vulnerability Detail
This security update addresses multiple vulnerabilities in the kernel-rt package, including a use-after-free issue in the SMB client (CVE-2025-38051), improper verification of data offsets in the SMB client (CVE-2025-39933), a potential double free in the DRM scheduler (CVE-2025-40096), and a fragment overflow handling issue in the Atlantic network driver (CVE-2025-68301). These vulnerabilities could lead to system crashes, data corruption, or unauthorized access, posing significant risks to system stability and security.
How To Fix
Minimum fixed version
4.18.0-553.94.1.rt7.435.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling the affected features of the kernel-rt package until the update can be applied. However, this may impact system performance and functionality, so it should be done with caution.
Conclusion
The kernel-rt package has been identified with critical vulnerabilities that require immediate attention. Updating to the latest patched version is essential to maintain system security and stability. Users are encouraged to monitor their systems and apply updates promptly.
See every vulnerability recorded for kernel-rt →
FAQ
Kernel-rt is a Real Time Linux Kernel package that provides enhanced timing and responsiveness for applications requiring high determinism.
The vulnerabilities could lead to system crashes, data corruption, or unauthorized access, significantly impacting system security and stability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider disabling the affected features as a temporary workaround, but be aware of the potential impact on system performance.
For more details, refer to the CVE pages linked in the advisory or consult the official documentation for the kernel-rt package.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
