Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux Real‑Time Kernel may crash or be exploited
published 11 months ago
Summary
The AlmaLinux real‑time kernel packages (kernel‑rt, kernel‑rt‑core, and their debug versions) contain coding errors that could cause the system to stop working or allow an attacker to take control. Updating to the latest kernel‑rt packages fixes these issues. Apply the security update as soon as possible to keep your systems stable and safe.
What to do
- Update almalinux kernel-rt to version 4.18.0-553.89.1.rt7.430.el8_10.
- Update almalinux kernel-rt-core to version 4.18.0-553.89.1.rt7.430.el8_10.
- Update almalinux kernel-rt-debug to version 4.18.0-553.89.1.rt7.430.el8_10.
- Update almalinux kernel-rt-debug-core to version 4.18.0-553.89.1.rt7.430.el8_10.
- Update almalinux kernel-rt-debug-devel to version 4.18.0-553.89.1.rt7.430.el8_10.
- Update almalinux kernel-rt-debug-modules to version 4.18.0-553.89.1.rt7.430.el8_10.
- Update almalinux kernel-rt-debug-modules-extra to version 4.18.0-553.89.1.rt7.430.el8_10.
- Update almalinux kernel-rt-devel to version 4.18.0-553.89.1.rt7.430.el8_10.
- Update almalinux kernel-rt-modules to version 4.18.0-553.89.1.rt7.430.el8_10.
- Update almalinux kernel-rt-modules-extra to version 4.18.0-553.89.1.rt7.430.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | kernel-rt |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-core |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-core |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-devel |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules-extra |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-devel |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules-extra |
< 4.18.0-553.89.1.rt7.430.el8_10 Fix: upgrade to 4.18.0-553.89.1.rt7.430.el8_10
|
Original advisory text
Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (CVE-2023-53401)
* kernel: RDMA/rxe: Fix incomplete state save in rxe_requester (CVE-2023-53539)
* kernel: RDMA/rxe: Fix mr->map double free (CVE-2022-50543)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (CVE-2023-53401)
* kernel: RDMA/rxe: Fix incomplete state save in rxe_requester (CVE-2023-53539)
* kernel: RDMA/rxe: Fix mr->map double free (CVE-2022-50543)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2025:22800 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-50543 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-53401 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-53539 Third Party Advisory
- https://bugzilla.redhat.com/2396417 Third Party Advisory
- https://bugzilla.redhat.com/2401510 Third Party Advisory
- https://bugzilla.redhat.com/2402222 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2025-22800.html Vendor Advisory
Timeline
Published8 Dec 2025
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2025:22800 · OSV
Track software like this
Free during beta