Critical Security Update for kernel-rt: Out-of-Bounds Read Vulnerability
Summary
ALSA-2026:36365: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.141.1.rt7.482.el8_10. Fixed in 4.18.0-553.141.1.rt7.482.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel, designed for systems that require high determinism and low latency. It is essential for applications in fields such as telecommunications, robotics, and industrial automation. The kernel-rt package allows fine-tuning of system performance, making it a critical component for real-time applications. However, it is susceptible to vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
The vulnerability identified as CVE-2026-43112 is an out-of-bounds read issue in the cifs_sanitize_prepath function within the kernel's SMB client. This flaw can allow an attacker to read memory beyond the intended buffer, potentially exposing sensitive information or leading to further exploitation of the system. The vulnerability arises from improper validation of input data, which can be exploited in specific scenarios involving SMB file sharing.
How To Fix
Minimum fixed version
4.18.0-553.141.1.rt7.482.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to SMB shares or disable SMB file sharing until the update is applied. This can help mitigate the risk of exploitation while waiting for the patch.
Conclusion
The kernel-rt package is critical for real-time applications, but it is currently affected by a significant vulnerability (CVE-2026-43112) that requires immediate attention. Users should update to the latest patched version to mitigate risks and consider temporary workarounds if necessary. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for kernel-rt →
FAQ
CVE-2026-43112 is a security vulnerability in the kernel-rt package that allows for an out-of-bounds read, potentially exposing sensitive information.
You can use the Vulert platform to check if your application is affected by this vulnerability. Visit Vulert Scanner to analyze your manifest file.
Exploitation of this vulnerability could lead to unauthorized access to sensitive data or further attacks on the system, compromising its integrity.
Yes, the patched version of the kernel-rt package is 4.18.0-553.141.1.rt7.482.el8_10. It is recommended to update to this version.
If immediate updating is not possible, consider limiting access to SMB shares or disabling SMB file sharing as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
