Kernel-RT Security Update: Mitigating Vulnerabilities in AlmaLinux 8 Packages
Summary
ALSA-2025:19932: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.83.1.rt7.424.el8_10. Fixed in 4.18.0-553.83.1.rt7.424.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, designed for systems requiring high determinism. This kernel variant is crucial for applications where timing and performance are critical, such as in embedded systems and real-time processing environments. The recent vulnerabilities identified in kernel-rt packages could potentially compromise system integrity and performance.
Vulnerability Detail
The vulnerabilities identified in the kernel-rt packages include a conditional IBPB mitigation for CVE-2025-40300, a race condition fix in zswap for CVE-2023-53178, and a use-after-free (UAF) and general protection fault (GPF) bug in nilfs_mdt_destroy for CVE-2022-50367. These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, significantly impacting system reliability and security.
How To Fix
Minimum fixed version
4.18.0-553.83.1.rt7.424.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for these vulnerabilities. The recommended action is to apply the security updates as soon as they are available.
Conclusion
The kernel-rt security update addresses critical vulnerabilities that could impact system integrity and performance. Users are strongly encouraged to update their kernel-rt packages to the latest patched version to mitigate these risks effectively.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel optimized for applications requiring high performance and low latency.
These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, affecting system reliability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
Currently, there are no specific workarounds. The best course of action is to apply the security updates.
It is advisable to regularly check for updates to ensure your system is protected against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
