The Red Hat kernel-rt packages, which provide a Real Time Linux Kernel for fine-tuning systems with high determinism requirements, have been updated to fix two security vulnerabilities identified as CVE-2024-25742 and CVE-2024-25743. Both vulnerabilities involve AMD hardware instructions that raise a #VC exception at exit. The advisory (RHSA-2024:2628) rates the security impact as Moderate and includes additional bug fixes updating the RT source tree to the latest RHEL-9.2 build. The update requires a system reboot to apply the changes.

The vulnerabilities affect AMD hardware instruction handling in the kernel-rt packages, potentially causing exceptions that could impact system stability or security. The advisory rates the impact as Moderate. No known exploits in the wild have been reported. The update mitigates these issues by correcting the instruction handling in the kernel-rt packages.

An official security update from Red Hat is available and should be applied. The update is included in the kernel-rt packages for Red Hat Enterprise Linux 9.2 Extended Update Support and Extended Life Cycle. Systems must be rebooted after applying the update for the fixes to take effect. Refer to Red Hat's official advisory RHSA-2024:2628 and article https://access.redhat.com/articles/11258 for detailed update instructions.