Critical Local Privilege Escalation Vulnerability in kernel-rt Package
Summary
ALSA-2026:19664: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.125.1.rt7.466.el8_10. Fixed in 4.18.0-553.125.1.rt7.466.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, which is designed for systems requiring high determinism. It allows fine-tuning of the kernel to meet the needs of real-time applications, ensuring that critical tasks receive the necessary CPU time. However, this package is susceptible to security vulnerabilities that can compromise system integrity and user privileges.
Vulnerability Detail
The vulnerability identified as CVE-2026-46300, known as 'Fragnesia', is a variant of the Dirty Frag vulnerability in the ESP/XFRM subsystem of the Linux kernel. This flaw allows an unprivileged user to escalate their privileges locally, potentially gaining unauthorized access to sensitive system resources. Additionally, CVE-2026-46333 enables unprivileged users to read root-owned files, further compromising system security. Both vulnerabilities pose significant risks to system integrity and confidentiality.
How To Fix
Minimum fixed version
4.18.0-553.125.1.rt7.466.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to sensitive files and monitor user permissions to mitigate the risk of exploitation until the patch is applied. However, the best course of action is to update the package as soon as possible.
Conclusion
The kernel-rt package has critical vulnerabilities that can lead to local privilege escalation and unauthorized access to sensitive files. It is crucial for users to update to the latest patched version to safeguard their systems. Utilizing tools like Vulert can help monitor for such vulnerabilities effectively.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel optimized for applications that require high determinism and low latency.
Exploitation of these vulnerabilities can lead to local privilege escalation, allowing unauthorized users to access sensitive files and system resources.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
Yes, failing to update the package leaves your system vulnerable to exploitation, which can lead to unauthorized access and potential data breaches.
If immediate updates are not possible, consider implementing strict access controls and monitoring user activities to reduce the risk of exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
