Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux real-time kernel could crash or be exploited
published 1 year ago
Summary
The AlmaLinux real‑time kernel packages (kernel‑rt, kernel‑rt‑core, and their debug versions) contain code that could cause a system crash or allow an attacker to run malicious code. One issue involves handling of certain virtual machine interrupts, and another involves Bluetooth communication. Install the latest kernel‑rt updates from AlmaLinux as soon as possible to protect your systems.
What to do
- Update almalinux kernel-rt to version 4.18.0-553.79.1.rt7.420.el8_10.
- Update almalinux kernel-rt-core to version 4.18.0-553.79.1.rt7.420.el8_10.
- Update almalinux kernel-rt-debug to version 4.18.0-553.79.1.rt7.420.el8_10.
- Update almalinux kernel-rt-debug-core to version 4.18.0-553.79.1.rt7.420.el8_10.
- Update almalinux kernel-rt-debug-devel to version 4.18.0-553.79.1.rt7.420.el8_10.
- Update almalinux kernel-rt-debug-modules to version 4.18.0-553.79.1.rt7.420.el8_10.
- Update almalinux kernel-rt-debug-modules-extra to version 4.18.0-553.79.1.rt7.420.el8_10.
- Update almalinux kernel-rt-devel to version 4.18.0-553.79.1.rt7.420.el8_10.
- Update almalinux kernel-rt-modules to version 4.18.0-553.79.1.rt7.420.el8_10.
- Update almalinux kernel-rt-modules-extra to version 4.18.0-553.79.1.rt7.420.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | kernel-rt |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-core |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-core |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-devel |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules-extra |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-devel |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules-extra |
< 4.18.0-553.79.1.rt7.420.el8_10 Fix: upgrade to 4.18.0-553.79.1.rt7.420.el8_10
|
Original advisory text
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CVE-2022-50228)
* kernel: Bluetooth: L2CAP: Fix use-after-free (CVE-2023-53305)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CVE-2022-50228)
* kernel: Bluetooth: L2CAP: Fix use-after-free (CVE-2023-53305)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2025:17812 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-50228 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-53305 Third Party Advisory
- https://bugzilla.redhat.com/2373529 Third Party Advisory
- https://bugzilla.redhat.com/2395858 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2025-17812.html Vendor Advisory
Timeline
Published13 Oct 2025
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2025:17812 · OSV
Track software like this
Free during beta