Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux Real-Time Kernel may allow privilege escalation
published 3 months ago
Summary
The Real‑Time Linux kernel packages for AlmaLinux can be tricked into giving a user higher privileges on systems using AMD Zen 2 processors. This could let an attacker gain unauthorized control of the machine. Update the kernel-rt packages to the latest versions to protect your system.
What to do
- Update almalinux kernel-rt to version 4.18.0-553.153.1.rt7.494.el8_10.
- Update almalinux kernel-rt-core to version 4.18.0-553.153.1.rt7.494.el8_10.
- Update almalinux kernel-rt-debug to version 4.18.0-553.153.1.rt7.494.el8_10.
- Update almalinux kernel-rt-debug-core to version 4.18.0-553.153.1.rt7.494.el8_10.
- Update almalinux kernel-rt-debug-devel to version 4.18.0-553.153.1.rt7.494.el8_10.
- Update almalinux kernel-rt-debug-modules to version 4.18.0-553.153.1.rt7.494.el8_10.
- Update almalinux kernel-rt-debug-modules-extra to version 4.18.0-553.153.1.rt7.494.el8_10.
- Update almalinux kernel-rt-devel to version 4.18.0-553.153.1.rt7.494.el8_10.
- Update almalinux kernel-rt-modules to version 4.18.0-553.153.1.rt7.494.el8_10.
- Update almalinux kernel-rt-modules-extra to version 4.18.0-553.153.1.rt7.494.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | kernel-rt |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-core |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-core |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-devel |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules-extra |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-devel |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules-extra |
< 4.18.0-553.153.1.rt7.494.el8_10 Fix: upgrade to 4.18.0-553.153.1.rt7.494.el8_10
|
Original advisory text
Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518)
Bug Fix(es) and Enhancement(s):
* Kernel crash in bpf_for_each_array_elem() due to missing backport of upstream commit 4b6313cf99b0 (JIRA:AlmaLinux-191844)
* gfs2: xfstests generic/363 failure [almalinux-8.10.z] (JIRA:AlmaLinux-214099)
* AlmaLinux8: HYPERV hv_storvsc driver can we add additional code to allow PERSISTENT_RESERVE_IN [AlmaLinux 8.10Z] (JIRA:AlmaLinux-188270)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518)
Bug Fix(es) and Enhancement(s):
* Kernel crash in bpf_for_each_array_elem() due to missing backport of upstream commit 4b6313cf99b0 (JIRA:AlmaLinux-191844)
* gfs2: xfstests generic/363 failure [almalinux-8.10.z] (JIRA:AlmaLinux-214099)
* AlmaLinux8: HYPERV hv_storvsc driver can we add additional code to allow PERSISTENT_RESERVE_IN [AlmaLinux 8.10Z] (JIRA:AlmaLinux-188270)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:50979 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-54518 Third Party Advisory
- https://bugzilla.redhat.com/2477784 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2026-50979.html Vendor Advisory
Timeline
Published6 Aug 2026
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2026:50979 · OSV
Track software like this
Free during beta