The Red Hat kernel-rt security advisory (RHSA-2024:3460) fixes seven vulnerabilities in the Real Time Linux Kernel used in Red Hat Enterprise Linux 9.2. The addressed issues include: marking sets as dead when unbinding anonymous sets with timeout (CVE-2024-26643), disallowing anonymous sets with timeout flags (CVE-2024-26642), sanitizing protocol numbers in custom expectations (CVE-2024-26673), fixing use-after-free and null pointer dereference in IPv6 segment routing (CVE-2024-26735), preventing perpetual headroom growth in IP tunnels (CVE-2024-26804), fixing underflow in CIFS server interface parsing (CVE-2024-26828), and fixing a reference leak in sysfs active protection (CVE-2024-26993). These fixes are included in an updated kernel-rt package for RHEL 9.2 Extended Update Support. The advisory does not provide CVSS scores but rates the impact as Moderate.

The vulnerabilities affect the kernel-rt Real Time Linux Kernel, potentially impacting system stability, security, and reliability in environments requiring precise timing and determinism. The issues include memory management flaws (use-after-free, null pointer dereference, reference leaks), protocol sanitization errors, and resource handling bugs that could lead to denial of service or unexpected behavior. The overall security impact is rated Moderate by Red Hat Product Security.

An official security update is available from Red Hat for the kernel-rt packages on Red Hat Enterprise Linux 9.2 Extended Update Support. Users should apply the update as described in the Red Hat advisory (RHSA-2024:3460) and reboot affected systems to ensure the fixes take effect. No additional mitigation steps are indicated by the vendor.