Moderate Security Update for kernel-rt: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:22387: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.87.1.rt7.428.el8_10. Fixed in 4.18.0-553.87.1.rt7.428.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, designed for systems that require high determinism and performance. It is essential for applications that demand precise timing and responsiveness, such as real-time data processing and control systems. However, like any software, it is susceptible to vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
This vulnerability affects the kernel-rt packages due to several security flaws, including improper handling of client requests in NFS, race conditions in SMB operations, and memory management issues. These vulnerabilities could lead to unauthorized access, system crashes, or data corruption, posing significant risks to system stability and security. The vulnerabilities are identified by CVEs such as CVE-2023-53513, CVE-2025-38724, CVE-2025-39825, CVE-2025-39883, CVE-2025-39898, and CVE-2025-39955.
How To Fix
Minimum fixed version
4.18.0-553.87.1.rt7.428.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected services or disable the functionalities that utilize the vulnerable components until the update is applied. This may involve modifying configuration files or using firewall rules to restrict access.
Conclusion
The kernel-rt package has been identified with multiple vulnerabilities that pose risks to system security and stability. It is crucial to update to the latest patched version to mitigate these risks. Users are encouraged to monitor their systems and apply necessary updates promptly.
See every vulnerability recorded for kernel-rt →
FAQ
Kernel-rt is a Real Time Linux Kernel package that provides enhanced performance and determinism for applications requiring precise timing.
The vulnerabilities can lead to unauthorized access, system crashes, and data corruption, significantly impacting system stability and security.
You can use Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
Consider implementing workarounds such as limiting access to affected services or disabling vulnerable functionalities until the update can be applied.
Detailed information about the vulnerabilities can be found on the respective CVE pages linked in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
