Moderate Security Update for kernel-rt Package: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:19440: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.82.1.rt7.423.el8_10. Fixed in 4.18.0-553.82.1.rt7.423.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems that require high determinism. It is essential for applications that demand precise timing and low latency. This package is widely used in environments such as industrial automation, telecommunications, and real-time data processing. However, vulnerabilities in this package can lead to security risks, including unauthorized access and system instability.
Vulnerability Detail
The kernel-rt package has been identified with several vulnerabilities, including CVE-2023-53257, which involves improper size checks for S1G action frames in the wifi mac80211 subsystem. CVE-2023-53226 highlights an out-of-bounds (OOB) read and integer underflow issue when receiving packets in the mwifiex driver. Additionally, CVE-2025-39864 presents a use-after-free vulnerability in the cmp_bss() function of cfg80211. These vulnerabilities can lead to potential exploitation, resulting in system crashes or unauthorized access.
How To Fix
Minimum fixed version
4.18.0-553.82.1.rt7.423.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of the affected wifi drivers until the update is applied. This may involve disabling certain wireless functionalities or using alternative drivers that are not impacted by these vulnerabilities.
Conclusion
The kernel-rt package has been found to contain several vulnerabilities that pose security risks. It is crucial for users to update to the latest patched version to mitigate these risks. Temporary workarounds are available, but updating is the most effective solution.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package is a Real Time Linux Kernel designed for applications requiring high precision and low latency.
The main vulnerabilities include improper size checks, out-of-bounds reads, and use-after-free issues in various wifi drivers.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
If immediate updates are not possible, consider disabling the affected wifi drivers or functionalities as a temporary measure.
More detailed information can be found on the CVE pages linked in the advisory or through the AlmaLinux security advisories.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
