Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518)
Bug Fix(es) and Enhancement(s):
* Kernel crash in bpf_for_each_array_elem() due to missing backport of upstream commit 4b6313cf99b0 (JIRA:AlmaLinux-191844)
* gfs2: xfstests generic/363 failure [almalinux-8.10.z] (JIRA:AlmaLinux-214099)
* AlmaLinux8: HYPERV hv_storvsc driver can we add additional code to allow PERSISTENT_RESERVE_IN [AlmaLinux 8.10Z] (JIRA:AlmaLinux-188270)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | kernel-rt | 4.18.0-553.153.1.rt7.494.el8_10 |
| AlmaLinux · 8 | kernel-rt-core | 4.18.0-553.153.1.rt7.494.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug | 4.18.0-553.153.1.rt7.494.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-core | 4.18.0-553.153.1.rt7.494.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-devel | 4.18.0-553.153.1.rt7.494.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules | 4.18.0-553.153.1.rt7.494.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules-extra | 4.18.0-553.153.1.rt7.494.el8_10 |
| AlmaLinux · 8 | kernel-rt-devel | 4.18.0-553.153.1.rt7.494.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules | 4.18.0-553.153.1.rt7.494.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules-extra | 4.18.0-553.153.1.rt7.494.el8_10 |
Vulnerabilities 1
-
High 7.3
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker t…