Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux real-time kernel may cause crashes or data loss
published 11 months ago
Summary
The AlmaLinux real‑time kernel packages (kernel‑rt, kernel‑rt‑core, and their debug versions) contain bugs that could let an attacker cause the system to crash, corrupt data, or bypass security checks. Updating to the latest kernel‑rt packages removes these bugs and restores normal protection. Apply the vendor's security update as soon as possible.
What to do
- Update almalinux kernel-rt to version 4.18.0-553.83.1.rt7.424.el8_10.
- Update almalinux kernel-rt-core to version 4.18.0-553.83.1.rt7.424.el8_10.
- Update almalinux kernel-rt-debug to version 4.18.0-553.83.1.rt7.424.el8_10.
- Update almalinux kernel-rt-debug-core to version 4.18.0-553.83.1.rt7.424.el8_10.
- Update almalinux kernel-rt-debug-devel to version 4.18.0-553.83.1.rt7.424.el8_10.
- Update almalinux kernel-rt-debug-modules to version 4.18.0-553.83.1.rt7.424.el8_10.
- Update almalinux kernel-rt-debug-modules-extra to version 4.18.0-553.83.1.rt7.424.el8_10.
- Update almalinux kernel-rt-devel to version 4.18.0-553.83.1.rt7.424.el8_10.
- Update almalinux kernel-rt-modules to version 4.18.0-553.83.1.rt7.424.el8_10.
- Update almalinux kernel-rt-modules-extra to version 4.18.0-553.83.1.rt7.424.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | kernel-rt |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-core |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-core |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-devel |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules-extra |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-devel |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules-extra |
< 4.18.0-553.83.1.rt7.424.el8_10 Fix: upgrade to 4.18.0-553.83.1.rt7.424.el8_10
|
Original advisory text
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)
* kernel: mm: fix zswap writeback race condition (CVE-2023-53178)
* kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)
* kernel: mm: fix zswap writeback race condition (CVE-2023-53178)
* kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2025:19932 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-50367 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-53178 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-40300 Third Party Advisory
- https://bugzilla.redhat.com/2394627 Third Party Advisory
- https://bugzilla.redhat.com/2395358 Third Party Advisory
- https://bugzilla.redhat.com/2396114 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2025-19932.html Vendor Advisory
Timeline
Published10 Nov 2025
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2025:19932 · OSV
Track software like this
Free during beta