Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: vsock/virtio: Validate length in packet header before skb_put() (CVE-2025-39718)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | kernel-rt | 4.18.0-553.84.1.rt7.425.el8_10 |
| AlmaLinux · 8 | kernel-rt-core | 4.18.0-553.84.1.rt7.425.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug | 4.18.0-553.84.1.rt7.425.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-core | 4.18.0-553.84.1.rt7.425.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-devel | 4.18.0-553.84.1.rt7.425.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules | 4.18.0-553.84.1.rt7.425.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules-extra | 4.18.0-553.84.1.rt7.425.el8_10 |
| AlmaLinux · 8 | kernel-rt-devel | 4.18.0-553.84.1.rt7.425.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules | 4.18.0-553.84.1.rt7.425.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules-extra | 4.18.0-553.84.1.rt7.425.el8_10 |
Vulnerabilities 1
-
High 8.4
vsock/virtio: Validate length in packet header before skb_put()
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unf…