Critical Security Update for kernel-rt Package: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:26428: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.134.1.rt7.475.el8_10. Fixed in 4.18.0-553.134.1.rt7.475.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel, designed for systems that require high determinism and low latency. It is essential for applications where timing is critical, such as industrial automation and real-time data processing. The kernel-rt package is a variant of the standard Linux kernel, optimized for real-time performance, making it crucial for users who depend on timely execution of tasks.
Vulnerability Detail
The kernel-rt package has been identified with several vulnerabilities, including a slab-use-after-free issue in the mptcp implementation (CVE-2026-31669), a double free vulnerability via VMA splitting in xen/privcmd (CVE-2026-31787), and a buffer overflow in the drivers/xen/sys-hypervisor.c (CVE-2026-31786). These vulnerabilities can lead to severe consequences, including system crashes, unauthorized access, and potential exploitation by malicious actors. The vulnerabilities stem from improper memory management and validation checks within the kernel code, highlighting the importance of timely updates to maintain system integrity.
How To Fix
Minimum fixed version
4.18.0-553.134.1.rt7.475.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected components or disable specific features that utilize the vulnerable code paths until the update is applied. However, the best course of action is to apply the patch as soon as possible.
Conclusion
The kernel-rt package has critical vulnerabilities that require immediate attention. Users should update to the latest patched version to safeguard their systems against potential exploits. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package is a Real Time Linux Kernel optimized for applications requiring high determinism and low latency.
The vulnerabilities can lead to system crashes, unauthorized access, and exploitation by attackers, compromising system security.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities. Visit Vulert Scanner to check your application without signup.
If immediate updates are not possible, consider limiting access to the affected components or disabling features that rely on the vulnerable code.
For detailed information, refer to the CVE pages linked in the advisory or consult the official documentation of the kernel-rt package.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
