Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
* kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)
* kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
* kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | kernel-rt | 4.18.0-553.69.1.rt7.410.el8_10 |
| AlmaLinux · 8 | kernel-rt-core | 4.18.0-553.69.1.rt7.410.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug | 4.18.0-553.69.1.rt7.410.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-core | 4.18.0-553.69.1.rt7.410.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-devel | 4.18.0-553.69.1.rt7.410.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules | 4.18.0-553.69.1.rt7.410.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules-extra | 4.18.0-553.69.1.rt7.410.el8_10 |
| AlmaLinux · 8 | kernel-rt-devel | 4.18.0-553.69.1.rt7.410.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules | 4.18.0-553.69.1.rt7.410.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules-extra | 4.18.0-553.69.1.rt7.410.el8_10 |
Vulnerabilities 5
-
High 8.8
can: peak_usb: fix use after free bugs
In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the peak_u…
-
High 7.8
padata: fix UAF in padata_reorder
In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-use-after-free in padata_find_next+0x29/0x1a0 Read of size 4 at addr ffff88bbfe003524 by task kworker/u11…
-
High 7.8
ipv6: mcast: extend RCU protection in igmp6_send()
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTNL or RCU being held. Extend RCU protection so that we can safely fetch the net pointer and avoid a pot…
-
High 7.8
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across processes, potentially turning it into a n…
-
Unscored —
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], ¶[1])', whi…
References
-
report
https://access.redhat.com/security/cve/CVE-2021-47670
-
report
https://access.redhat.com/security/cve/CVE-2025-21727
-
report
https://access.redhat.com/security/cve/CVE-2025-21759
-
report
https://access.redhat.com/security/cve/CVE-2025-38085
-
report
https://access.redhat.com/security/cve/CVE-2025-38159
-
report
https://bugzilla.redhat.com/2348516
-
report
https://bugzilla.redhat.com/2348596
-
report
https://bugzilla.redhat.com/2360786
-
report
https://bugzilla.redhat.com/2375304
-
report
https://bugzilla.redhat.com/2376064
-
advisory
https://errata.almalinux.org/8/ALSA-2025-13590.html