Critical Local Privilege Escalation Vulnerability in kernel-rt Package
Summary
ALSA-2026:16196: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.124.1.rt7.465.el8_10. Fixed in 4.18.0-553.124.1.rt7.465.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel, designed for systems requiring high determinism. It is essential for applications that demand precise timing and responsiveness, such as industrial automation and real-time data processing. However, this package is susceptible to security vulnerabilities that can compromise system integrity.
Vulnerability Detail
The vulnerability identified as CVE-2026-43284, known as 'Dirty Frag', is a universal Local Privilege Escalation (LPE) flaw in the Linux kernel. This vulnerability allows an attacker with local access to escalate their privileges, potentially gaining unauthorized access to sensitive system resources and data. The implications of this vulnerability are severe, as it can lead to complete system compromise if exploited.
How To Fix
Minimum fixed version
4.18.0-553.124.1.rt7.465.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the security update as soon as it is available.
Conclusion
The kernel-rt package is vital for real-time applications but is currently vulnerable to a significant Local Privilege Escalation flaw. It is essential to update to the patched version to mitigate risks associated with this vulnerability. Regular monitoring and prompt updates are crucial for maintaining system security.
See every vulnerability recorded for kernel-rt →
FAQ
CVE-2026-43284 is a Local Privilege Escalation vulnerability in the Linux kernel that allows attackers to gain elevated privileges on affected systems.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
Failing to address this vulnerability can lead to unauthorized access, data breaches, and potential system compromise, putting sensitive information at risk.
The kernel-rt package is primarily used in systems that require real-time processing capabilities. It may not be necessary for all users, but it is critical for applications that demand high precision.
If an immediate update is not possible, limit access to the system and monitor for any suspicious activity until the update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
