Skip to content
OpenAdvisories
Medium ALSA-2025:9581 6 CVEs

Moderate: kernel-rt security update

Published Jun 25, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: cifs: fix double free race when mount fails in cifs_get_root() (CVE-2022-48919)
* kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301)
* kernel: idpf: fix idpf_vc_core_init error path (CVE-2024-53064)
* kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 10

ReleasePackageFixed in
AlmaLinux · 8 kernel-rt 4.18.0-553.58.1.rt7.399.el8_10
AlmaLinux · 8 kernel-rt-core 4.18.0-553.58.1.rt7.399.el8_10
AlmaLinux · 8 kernel-rt-debug 4.18.0-553.58.1.rt7.399.el8_10
AlmaLinux · 8 kernel-rt-debug-core 4.18.0-553.58.1.rt7.399.el8_10
AlmaLinux · 8 kernel-rt-debug-devel 4.18.0-553.58.1.rt7.399.el8_10
AlmaLinux · 8 kernel-rt-debug-modules 4.18.0-553.58.1.rt7.399.el8_10
AlmaLinux · 8 kernel-rt-debug-modules-extra 4.18.0-553.58.1.rt7.399.el8_10
AlmaLinux · 8 kernel-rt-devel 4.18.0-553.58.1.rt7.399.el8_10
AlmaLinux · 8 kernel-rt-modules 4.18.0-553.58.1.rt7.399.el8_10
AlmaLinux · 8 kernel-rt-modules-extra 4.18.0-553.58.1.rt7.399.el8_10

Vulnerabilities 6

  • High 8.8
    CVE-2022-48919

    cifs: fix double free race when mount fails in cifs_get_root()

    In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails during cifs_smb3_do_mount() we call deactivate_locked_super() which eventually will call delayed_free…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-50301

    security/keys: fix slab-out-of-bounds in key_task_permission

    In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in __kuid_val include/linux/uidgid.h:36 BUG: KASAN: slab-out-o…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-21764

    ndisc: use RCU protection in ndisc_alloc_skb()

    In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2023-53230

    smb: client: fix warning in cifs_smb3_do_mount()

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning in cifs_smb3_do_mount() This fixes the following warning reported by kernel test robot fs/smb/client/cifsfs.c:982 cifs_smb3_do_mount() warn: possible memory leak of '…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-53064

    idpf: fix idpf_vc_core_init error path

    In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits fo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38053

    idpf: fix null-ptr-deref in idpf_features_check

    In the Linux kernel, the following vulnerability has been resolved: idpf: fix null-ptr-deref in idpf_features_check idpf_features_check is used to validate the TX packet. skb header length is compared with the hardware supported value received from the device…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-48919
  • report
    https://access.redhat.com/security/cve/CVE-2024-50301
  • report
    https://access.redhat.com/security/cve/CVE-2024-53064
  • report
    https://access.redhat.com/security/cve/CVE-2025-21764
  • report
    https://bugzilla.redhat.com/2327188
  • report
    https://bugzilla.redhat.com/2327347
  • report
    https://bugzilla.redhat.com/2348575
  • advisory
    https://errata.almalinux.org/8/ALSA-2025-9581.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2023-53230.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2025-38053.html