Moderate Security Vulnerability in kernel-rt Package: NULL Pointer Dereference and Memory Management Issues
Summary
ALSA-2025:22800: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.89.1.rt7.430.el8_10. Fixed in 4.18.0-553.89.1.rt7.430.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt package provides the Real Time Linux Kernel, which is designed for systems requiring high determinism and low latency. It is essential for applications that demand precise timing and responsiveness, such as industrial automation and real-time data processing. However, vulnerabilities in this package can lead to system instability and security risks, making it crucial to address any identified issues promptly.
Vulnerability Detail
This vulnerability stems from multiple issues within the kernel-rt package, including a NULL pointer dereference in the obj_stock_flush_required() function, which can lead to system crashes or unexpected behavior. Additionally, there are memory management flaws related to the RDMA/rxe subsystem, including an incomplete state save in rxe_requester and a double free in the mr->map, which can be exploited to cause denial of service or potentially execute arbitrary code.
How To Fix
Minimum fixed version
4.18.0-553.89.1.rt7.430.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of the affected functionalities in the kernel-rt package until the update is applied. However, it is strongly advised to apply the update as soon as possible to mitigate the risks associated with these vulnerabilities.
Conclusion
The kernel-rt package has been identified with several vulnerabilities that could lead to significant security risks. It is crucial for users to update to the latest patched version to ensure system stability and security. Regular monitoring and updates are essential practices for maintaining a secure environment.
See every vulnerability recorded for kernel-rt →
FAQ
The kernel-rt package provides a Real Time Linux Kernel, optimized for applications that require high precision and low latency.
The risks include system crashes, denial of service, and potential arbitrary code execution due to memory management flaws.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software without needing to access the code or installation.
Yes, limiting the use of affected functionalities can serve as a temporary workaround until the patch is applied.
It is recommended to regularly check for updates and apply them promptly to minimize exposure to vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
