Critical Security Update for Real Time Linux Kernel: kernel-rt Vulnerability (CVE-2023-52922)
Summary
ALSA-2025:3027: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.45.1.rt7.386.el8_10. Fixed in 4.18.0-553.45.1.rt7.386.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems requiring high determinism. It allows for fine-tuning of system performance, making it suitable for applications in real-time computing environments. This package is crucial for industries where timing and precision are paramount, such as telecommunications and robotics. However, it is susceptible to security vulnerabilities that can compromise system integrity.
Vulnerability Detail
The vulnerability identified as CVE-2023-52922 is a Use After Free (UAF) issue in the bcm_proc_show() function of the kernel-rt package. This flaw can lead to unauthorized access to memory, potentially allowing an attacker to execute arbitrary code or crash the system. The vulnerability arises from improper handling of memory allocation and deallocation, which can be exploited in environments where the kernel-rt is deployed.
How To Fix
Minimum fixed version
4.18.0-553.45.1.rt7.386.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected functionality or disable the bcm_proc_show() feature until the package is updated. This can be done by modifying the system configuration to restrict access to the kernel-rt features that utilize this function.
Conclusion
The kernel-rt package is essential for real-time computing, but it has been identified with a critical vulnerability (CVE-2023-52922) that requires immediate attention. Users should update to the patched version to mitigate risks associated with this security flaw. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for kernel-rt →
FAQ
CVE-2023-52922 is a security vulnerability in the kernel-rt package that allows for a Use After Free condition, potentially leading to unauthorized memory access.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failing to address this vulnerability can lead to system crashes, unauthorized access, and potential exploitation by attackers, compromising sensitive data and system functionality.
Yes, the patched version 4.18.0-553.45.1.rt7.386.el8_10 is safe and addresses the vulnerability.
After updating the package, it is advisable to reboot your system to ensure that all changes take effect and to verify that the system operates correctly without the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
