Summary
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | kernel-rt | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-core | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-core | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-devel | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-kvm | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules-extra | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-debug-modules-internal | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-devel | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-kvm | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules-extra | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-modules-internal | 4.18.0-553.123.2.rt7.464.el8_10 |
| AlmaLinux · 8 | kernel-rt-selftests-internal | 4.18.0-553.123.2.rt7.464.el8_10 |
Vulnerabilities 1
-
High 8.8
xfrm: esp: avoid in-place decrypt on shared skb frags
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter()…