Critical Security Update for Real Time Linux Kernel: kernel-rt Vulnerability
Summary
ALSA-2026:77500: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.172.1.rt7.513.el8_10. Fixed in 4.18.0-553.172.1.rt7.513.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems that require high determinism and low latency. This package is crucial for applications in industries such as telecommunications, robotics, and real-time data processing. However, vulnerabilities in the kernel can lead to severe security risks, affecting system stability and data integrity.
Vulnerability Detail
The kernel-rt package has been identified with several vulnerabilities, including a use-after-free (UAF) issue when a peer resets a connection during a handshake (CVE-2026-64115), inconsistencies in the hard_header_len during non-ring send paths (CVE-2026-74582), and an overflow issue in inline replies that could compromise the pull-up buffer (CVE-2026-89530). These vulnerabilities can lead to unauthorized access, data corruption, and potential system crashes.
How To Fix
Minimum fixed version
4.18.0-553.172.1.rt7.513.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you may consider disabling the affected services or restricting access to the kernel-rt functionalities until the update is applied. However, this is not a permanent solution and should be followed by an update as soon as possible.
Conclusion
The kernel-rt package has critical vulnerabilities that require immediate attention. Updating to the latest patched version is essential to maintain system security and integrity. Users are encouraged to monitor their systems and apply updates promptly to safeguard against potential exploits.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel, which is optimized for applications requiring high determinism and low latency.
Exploiting these vulnerabilities can lead to unauthorized access, data corruption, and system crashes, posing significant security risks.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Yes, a patched version of the kernel-rt package is available. Update to version 4.18.0-553.172.1.rt7.513.el8_10 or later.
If immediate updates are not possible, consider disabling affected services or restricting access to mitigate risks until the update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
