Skip to content
OpenAdvisories
High RLSA-2021:4646 2 CVEs

Important: kernel-rt security and bug fix update

Published Nov 15, 2021 · Updated Feb 4, 2026

Summary

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type (CVE-2021-43267)

* kernel: timer tree corruption leads to missing wakeup and system freeze (CVE-2021-20317)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the Rocky Linux-8.5.z source tree (BZ#2020036)

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 kernel-rt 0:4.18.0-348.2.1.rt7.132.el8_5

Vulnerabilities 2

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2005258
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2020362