Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: bpf: Don't use tnum_range on array range checking for poke descriptors (CVE-2022-49985)
* kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | kernel-rt | 4.18.0-553.74.1.rt7.415.el8_10 |
| AlmaLinux · 8 | kernel-rt-core | 4.18.0-553.74.1.rt7.415.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug | 4.18.0-553.74.1.rt7.415.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-core | 4.18.0-553.74.1.rt7.415.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-devel | 4.18.0-553.74.1.rt7.415.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules | 4.18.0-553.74.1.rt7.415.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules-extra | 4.18.0-553.74.1.rt7.415.el8_10 |
| AlmaLinux · 8 | kernel-rt-devel | 4.18.0-553.74.1.rt7.415.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules | 4.18.0-553.74.1.rt7.415.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules-extra | 4.18.0-553.74.1.rt7.415.el8_10 |
Vulnerabilities 2
-
High 7.8
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() …
KEV Sep 4, 2025 -
High 7.8
bpf: Don't use tnum_range on array range checking for poke descriptors
In the Linux kernel, the following vulnerability has been resolved: bpf: Don't use tnum_range on array range checking for poke descriptors Hsin-Wei reported a KASAN splat triggered by their BPF runtime fuzzer which is based on a customized syzkaller: BUG: KAS…