Moderate Security Vulnerability in kernel-rt Package: Use-After-Free and Error Recovery Issues
Summary
ALSA-2026:6036: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.115.1.rt7.456.el8_10. Fixed in 4.18.0-553.115.1.rt7.456.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems requiring high determinism. It allows fine-tuning for performance-critical applications, making it essential for real-time processing tasks. However, vulnerabilities in this package can lead to significant security risks, affecting system stability and data integrity.
Vulnerability Detail
This vulnerability arises from a Use-After-Free issue in the ATM subsystem (CVE-2025-38180), which can lead to arbitrary code execution or system crashes. Additionally, there are error recovery flaws in the macvlan_common_newlink() function (CVE-2026-23209) and improper handling of skb_header_pointer_careful() in the cls_u32 classifier (CVE-2026-23204). These vulnerabilities can be exploited by attackers to compromise system security and reliability.
How To Fix
Minimum fixed version
4.18.0-553.115.1.rt7.456.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling the affected features or using an alternative kernel version until the update can be applied. However, this may not be feasible for all users depending on their specific use cases.
Conclusion
The kernel-rt package has a moderate security vulnerability that requires immediate attention. Users are advised to update to the latest patched version to mitigate risks associated with Use-After-Free and error recovery issues. Regular monitoring and vulnerability management practices are essential for maintaining system security.
See every vulnerability recorded for kernel-rt →
FAQ
A Use-After-Free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially allowing attackers to execute arbitrary code.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
Exploitation of this vulnerability can lead to system crashes, unauthorized access, or arbitrary code execution, compromising the integrity and security of the system.
Yes, if exploited, this vulnerability could lead to data corruption or loss, especially in systems handling critical real-time data.
If immediate updates are not possible, consider implementing temporary workarounds and closely monitor your system for any unusual activity.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
