ALSA-2026:87374: Important security update for AlmaLinux 8 real-time kernel packages
Summary
ALSA-2026:87374: Multiple kernel security flaws could affect packet handling, filesystem operations, audio queue cleanup, and device initialization. Affects kernel-rt versions < 4.18.0-553.177.1.rt7.518.el8_10. Fixed in 4.18.0-553.177.1.rt7.518.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
kernel-rt is a real-time Linux kernel package in the AlmaLinux:8 ecosystem. It enables fine-tuning for systems with extremely high determinism requirements. The advisory also covers related kernel-rt core, debug, development, and module packages, which provide corresponding kernel components for AlmaLinux 8 systems.
Vulnerability Detail
The advisory addresses multiple kernel security flaws affecting network packet processing, FUSE, IPv4 routing, ALSA sequencer cleanup, XFS logging, fragment reassembly, and VFIO PCI initialization. The listed fixes correct unsafe handling or cleanup in these components; the advisory does not specify the individual impacts. Related CVE identifiers are CVE-2026-64114, CVE-2026-64266, CVE-2026-64572, CVE-2026-68202, CVE-2026-80536, CVE-2026-80590, and CVE-2026-89777.
How To Fix
Minimum fixed version
4.18.0-553.177.1.rt7.518.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
AI-generated workaround (not vendor-documented): Restrict access to systems running affected kernel-rt packages and limit exposure to untrusted network traffic and users until the fixed packages can be installed. No vendor workaround is documented.
Conclusion
Upgrade affected AlmaLinux:8 kernel-rt packages to 4.18.0-553.177.1.rt7.518.el8_10 or later. The advisory covers several kernel components, and the specific impacts are not published in the supplied details. Vulert monitors the dependencies in a manifest file like package-lock.json and alerts when a new vulnerability affects them; check an application at https://vulert.com/scanner.
See every vulnerability recorded for kernel-rt →
FAQ
The advisory marks kernel-rt and its listed companion packages as affected before 4.18.0-553.177.1.rt7.518.el8_10.
The advisory lists flaws across networking, filesystems, audio, and device initialization, but does not publish specific attacker impacts.
Upgrade affected kernel-rt packages to the minimum fixed version 4.18.0-553.177.1.rt7.518.el8_10.
Restrict access to systems running kernel-rt and limit exposure to untrusted network traffic and users until upgrading.
Manually inspect the system's installed package inventory for kernel-rt and its related packages. Vulert can scan a manifest or SBOM and monitor the dependency at Vulert Scanner.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
