Kernel-RT Vulnerability: Moderate Security Update for AlmaLinux 8
Summary
ALSA-2026:6572: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.117.1.rt7.458.el8_10. Fixed in 4.18.0-553.117.1.rt7.458.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides a Real Time Linux Kernel designed for systems requiring high determinism. It is crucial for applications where timing and performance are critical. This package is widely used in environments such as embedded systems, telecommunications, and industrial automation, where delays can lead to significant issues. The kernel-rt package is part of the AlmaLinux ecosystem, which is a community-driven, open-source operating system that is binary-compatible with RHEL.
Vulnerability Detail
The kernel-rt packages are affected by several vulnerabilities that could lead to privilege escalation or denial of service. Specifically, a race condition in the nouveau driver (CVE-2024-26984), a use-after-free in the iscsi target (CVE-2026-23193), and a double free vulnerability in the qla2xxx driver (CVE-2025-71238) have been identified. These vulnerabilities can be exploited by an attacker to gain unauthorized access or disrupt system operations, making it critical to address them promptly.
How To Fix
Minimum fixed version
4.18.0-553.117.1.rt7.458.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may consider disabling the affected drivers or features until the system can be updated. However, this may impact system performance and functionality, so it should be done with caution.
Conclusion
The kernel-rt security update for AlmaLinux 8 addresses several critical vulnerabilities that could lead to serious security issues. It is essential for users to update their systems to the latest version to mitigate these risks. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel optimized for applications requiring high determinism and low latency.
Exploiting these vulnerabilities could lead to privilege escalation, allowing unauthorized users to gain access to sensitive data or disrupt system operations.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Yes, not updating the package leaves your system vulnerable to attacks that could exploit these security flaws.
While manual patching is possible, it is highly recommended to update to the official patched version to ensure all vulnerabilities are addressed comprehensively.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
