Kernel-RT Security Update: Addressing Multiple Vulnerabilities in AlmaLinux 8 Packages
Summary
ALSA-2026:2821: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.105.1.rt7.446.el8_10. Fixed in 4.18.0-553.105.1.rt7.446.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel-rt packages provide the Real Time Linux Kernel, designed for systems requiring high determinism. This kernel variant is essential for applications that need precise timing and low-latency processing. However, recent vulnerabilities have been identified that could compromise system security and stability.
Vulnerability Detail
The vulnerabilities in the kernel-rt packages stem from various issues, including a use-after-free condition in Bluetooth connection handling, which can lead to Denial of Service (CVE-2023-53762). Additionally, an out-of-bounds write in fbdev could allow for privilege escalation, information disclosure, or denial of service (CVE-2025-40304). These vulnerabilities can be exploited by attackers to gain unauthorized access or disrupt system operations.
How To Fix
Minimum fixed version
4.18.0-553.105.1.rt7.446.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the use of Bluetooth functionalities until the update is applied, thereby reducing exposure to the Denial of Service vulnerability.
Conclusion
The kernel-rt security update addresses critical vulnerabilities that could affect system stability and security. It is essential for users to update their packages promptly to mitigate risks associated with these vulnerabilities.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel optimized for applications that require high precision and low latency.
The vulnerabilities can lead to Denial of Service, privilege escalation, and information disclosure, potentially compromising system security.
You can use Vulert, which monitors open-source vulnerabilities in real-time using a manifest file. Visit Vulert Scanner to check your application without needing to sign up.
Yes, temporarily disabling Bluetooth functionalities can help mitigate the risk of exploitation until the update is applied.
Detailed information can be found on the CVE pages linked in the advisory, which provide insights into the vulnerabilities and their impacts.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.