Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux real‑time kernel may crash or be hijacked
published 1 day ago
Summary
The AlmaLinux real‑time Linux kernel packages contain several flaws that could let an attacker cause the system to stop working or take control of network functions. Updating to the latest kernel‑rt packages removes these problems and restores normal operation. Apply the provided kernel‑rt update as soon as possible to keep your servers stable and secure.
What to do
- Update almalinux kernel-rt to version 4.18.0-553.184.1.rt7.525.el8_10.
- Update almalinux kernel-rt-core to version 4.18.0-553.184.1.rt7.525.el8_10.
- Update almalinux kernel-rt-debug to version 4.18.0-553.184.1.rt7.525.el8_10.
- Update almalinux kernel-rt-debug-core to version 4.18.0-553.184.1.rt7.525.el8_10.
- Update almalinux kernel-rt-debug-devel to version 4.18.0-553.184.1.rt7.525.el8_10.
- Update almalinux kernel-rt-debug-modules to version 4.18.0-553.184.1.rt7.525.el8_10.
- Update almalinux kernel-rt-debug-modules-extra to version 4.18.0-553.184.1.rt7.525.el8_10.
- Update almalinux kernel-rt-devel to version 4.18.0-553.184.1.rt7.525.el8_10.
- Update almalinux kernel-rt-modules to version 4.18.0-553.184.1.rt7.525.el8_10.
- Update almalinux kernel-rt-modules-extra to version 4.18.0-553.184.1.rt7.525.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | kernel-rt |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-core |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-core |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-devel |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-debug-modules-extra |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-devel |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
| AlmaLinux:8 | almalinux | kernel-rt-modules-extra |
< 4.18.0-553.184.1.rt7.525.el8_10 Fix: upgrade to 4.18.0-553.184.1.rt7.525.el8_10
|
Original advisory text
Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)
* kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541)
* kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586)
* kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864)
* kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863)
* kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)
Bug Fix(es) and Enhancement(s):
* AlmaLinux8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:RHEL-298849)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)
* kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541)
* kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586)
* kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864)
* kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863)
* kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)
Bug Fix(es) and Enhancement(s):
* AlmaLinux8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:RHEL-298849)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:95100 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-52929 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-64541 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-74586 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-80863 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-80864 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-89488 Third Party Advisory
- https://bugzilla.redhat.com/2492108 Third Party Advisory
- https://bugzilla.redhat.com/2507721 Third Party Advisory
- https://bugzilla.redhat.com/2521419 Third Party Advisory
- https://bugzilla.redhat.com/2528646 Third Party Advisory
- https://bugzilla.redhat.com/2528665 Third Party Advisory
- https://bugzilla.redhat.com/2532407 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2026-95100.html Vendor Advisory
Timeline
Published4 Nov 2026
Updated4 Nov 2026
First seen4 Nov 2026
Sources
ALSA-2026:95100 · OSV
Track software like this
Free during beta