Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Kernel RT Security Update Exposes System to Privilege Escalation

published 10 months ago

Summary

The Red Hat Kernel RT update addresses a security issue in the kernel that could allow an attacker to gain elevated privileges on a system. This affects systems running the Red Hat Kernel RT. To protect your system, apply the latest kernel update as soon as possible.

What to do

Update redhat kernel-rt to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-debug to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-debug-debuginfo to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-debug-devel to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-debuginfo to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-debuginfo-common-x86_64 to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-devel to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-doc to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-trace to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-trace-debuginfo to version 0:3.10.0-1160.144.1.rt56.1296.el7.
Update redhat kernel-rt-trace-devel to version 0:3.10.0-1160.144.1.rt56.1296.el7.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-debug	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-debug-debuginfo	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-debug-devel	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-debuginfo	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-debuginfo-common-x86_64	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-devel	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-doc	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-trace	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-trace-debuginfo	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7
Red Hat:rhel_extras_rt_els:7	redhat	kernel-rt-trace-devel	< 0:3.10.0-1160.144.1.rt56.1296.el7 Fix: upgrade to 0:3.10.0-1160.144.1.rt56.1296.el7

Original advisory text

Red Hat Security Advisory: kernel-rt security update

References

https://access.redhat.com/errata/RHSA-2025:23960 Vendor Advisory
https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2393164 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2394615 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395358 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395681 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395891 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2396114 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2396152 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2396494 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2396536 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2396538 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2402699 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23960.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2022-50356 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-50356 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-50356 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025091714-CVE-2022-50356-fe76@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-50367 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-50367 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-50367 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025091716-CVE-2022-50367-651c@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-50403 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-50403 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-50403 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025091852-CVE-2022-50403-0471@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-50406 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-50406 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-50406 Vendor Advisory
https://git.kernel.org/stable/c/3d5f3ba1ac28059bdf7000cae2403e4e984308d2 Third Party Advisory
https://git.kernel.org/stable/c/7308591d9c7787aec58f6a01a7823f14e90db7a2 Third Party Advisory
https://git.kernel.org/stable/c/82c66c46f73b88be74c869e2cbfef45281adf3c6 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-50410 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-50410 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-50410 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025091853-CVE-2022-50410-edee@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-53178 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-53178 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-53178 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025091555-CVE-2023-53178-9d27@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-53297 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-53297 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-53297 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025091627-CVE-2023-53297-8746@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-53322 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-53322 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-53322 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025091644-CVE-2023-53322-45ba@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-38729 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-38729 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-38729 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025090403-CVE-2025-38729-ca88@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-39757 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-39757 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-39757 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025091144-CVE-2025-39757-e212@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-39955 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-39955 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-39955 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2025100942-CVE-2025-39955-f36b@gregkh... Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

7.6 High

Timeline

Published23 Dec 2025

Updated5 Aug 2026

First seen5 Aug 2026

Sources

RHSA-2025:23960 · OSV

Track software like this

Free during beta