Critical Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:13578: Important: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.123.1.rt7.464.el8_10. Fixed in 4.18.0-553.123.1.rt7.464.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel, designed for systems that require high determinism and low latency. It is crucial for applications in fields such as telecommunications, industrial automation, and real-time data processing. However, this package is susceptible to several vulnerabilities that could compromise system integrity and security.
Vulnerability Detail
The kernel-rt package has been identified with multiple vulnerabilities, including a double free issue (CVE-2024-41073), potential out-of-bounds reads (CVE-2025-40252), and a heap overflow in NFSv4.0 (CVE-2026-31402). These vulnerabilities can lead to privilege escalation, denial of service, and data corruption, posing significant risks to system stability and security.
How To Fix
Minimum fixed version
4.18.0-553.123.1.rt7.464.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for these vulnerabilities. The best course of action is to apply the security update as soon as it is available.
Conclusion
The kernel-rt package has critical vulnerabilities that need immediate attention. Updating to the latest patched version is essential to maintain system security and integrity. Users are encouraged to utilize tools like Vulert for ongoing monitoring of vulnerabilities in their applications.
See every vulnerability recorded for kernel-rt →
FAQ
kernel-rt is a Real Time Linux Kernel package that allows for fine-tuning of systems requiring high determinism.
The vulnerabilities can lead to privilege escalation, denial of service, and data corruption, which can severely impact system security.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without needing to sign up.
Yes, a patch is available in version 4.18.0-553.123.1.rt7.464.el8_10 of the kernel-rt package.
While there are no specific workarounds, it is advisable to monitor your system closely and apply the update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
