Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:1148: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.97.1.rt7.438.el8_10. Fixed in 4.18.0-553.97.1.rt7.438.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, which is essential for systems requiring high determinism. It allows for fine-tuning of system performance, making it suitable for real-time applications. However, vulnerabilities in this package can lead to severe security risks, including memory corruption and improper handling of Bluetooth connections.
Vulnerability Detail
This security update addresses multiple vulnerabilities in the kernel-rt package. Notably, CVE-2023-53673 involves improper handling of Bluetooth disconnection callbacks, which could lead to unexpected behavior. CVE-2025-40154 relates to an invalid quirk input mapping in the Intel ASoC driver, potentially causing system instability. CVE-2025-40248 highlights a vsock vulnerability that may result in memory corruption, while CVE-2025-40277 pertains to insufficient validation of command header sizes in the drm/vmwgfx driver, which could lead to denial of service or arbitrary code execution.
How To Fix
Minimum fixed version
4.18.0-553.97.1.rt7.438.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable Bluetooth functionality to mitigate risks associated with CVE-2023-53673. This can be done by executing the command:
sudo systemctl stop bluetooth.service' until the system is updated.
Conclusion
The kernel-rt security update addresses critical vulnerabilities that could compromise system integrity and performance. It is essential for users to update to the latest patched version to ensure their systems remain secure. Temporary workarounds can mitigate risks until the update is applied.
See every vulnerability recorded for kernel-rt →
FAQ
Kernel-rt is a Real Time Linux Kernel package designed for systems that require high determinism and performance tuning.
Failure to update kernel-rt may expose systems to vulnerabilities that can lead to memory corruption, system instability, and potential unauthorized access.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, consider disabling Bluetooth and monitoring system behavior closely until the update can be applied.
Detailed information about the vulnerabilities can be found on the respective CVE pages linked in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
