Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:68532: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.164.1.rt7.505.el8_10. Fixed in 4.18.0-553.164.1.rt7.505.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems requiring high determinism. It is essential for applications that demand precise timing and low latency, such as real-time data processing and control systems. However, this package is susceptible to various vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
The kernel-rt package has multiple vulnerabilities that stem from issues in its handling of network protocols and memory management. These vulnerabilities include potential out-of-bounds reads, use-after-free errors, and improper handling of incoming packets, which could lead to system crashes or unauthorized access. The vulnerabilities are identified by several CVEs, including CVE-2026-23103 and CVE-2026-31663, among others. If exploited, these vulnerabilities could allow attackers to execute arbitrary code, disrupt services, or gain elevated privileges.
How To Fix
Minimum fixed version
4.18.0-553.164.1.rt7.505.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of their systems by implementing strict firewall rules to block unauthorized access and monitoring network traffic for unusual activities. However, this is not a permanent solution and updating the package is strongly advised.
Conclusion
The kernel-rt package has critical vulnerabilities that require immediate attention. Updating to the latest patched version is essential to safeguard your system against potential exploits. Users are encouraged to monitor their systems and apply the necessary updates promptly.
See every vulnerability recorded for kernel-rt →
FAQ
kernel-rt is a Real Time Linux Kernel package that allows for fine-tuning of systems requiring high determinism and low latency.
The vulnerabilities can lead to system crashes, unauthorized access, and execution of arbitrary code, posing significant security risks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Yes, a patch is available in the form of an updated kernel-rt package version 4.18.0-553.164.1.rt7.505.el8_10.
If immediate updating is not possible, implement strict firewall rules and monitor network traffic as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
