Denial of Service Vulnerability in kernel-rt Package: Security Update Required
Summary
ALSA-2026:3463: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.109.1.rt7.450.el8_10. Fixed in 4.18.0-553.109.1.rt7.450.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems requiring high determinism. It allows for fine-tuning of system performance, making it essential for applications that demand real-time processing capabilities. However, this package is susceptible to vulnerabilities that can compromise system stability and security.
Vulnerability Detail
A Denial of Service vulnerability has been identified in the kernel-rt package due to a deadlock in hugetlb folio migration, as documented in CVE-2026-23097. This vulnerability can lead to system unresponsiveness, impacting applications that rely on real-time processing. The issue arises from improper handling of memory management, which can cause the system to hang under specific conditions.
How To Fix
Minimum fixed version
4.18.0-553.109.1.rt7.450.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the security update as soon as it is available.
Conclusion
The kernel-rt package has a critical Denial of Service vulnerability that requires immediate attention. Users should update to the latest patched version to ensure system stability and security. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel, enabling systems to meet high determinism requirements for real-time applications.
The Denial of Service vulnerability can cause the system to become unresponsive, affecting the performance of applications that depend on real-time processing.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file, like package-lock.json, you can receive real-time alerts about vulnerabilities.
Yes, a patch is available. Users should update to kernel-rt version 4.18.0-553.109.1.rt7.450.el8_10 or later to mitigate the vulnerability.
While there are no specific workarounds, it is crucial to prioritize the update to avoid potential system instability.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
