The Red Hat kernel-rt packages, which provide a real-time Linux kernel for systems requiring high determinism, have been updated to fix two security issues. CVE-2024-0565 is a remote code execution vulnerability in the CIFS filesystem decryption function receive_encrypted_standard caused by improper input validation. CVE-2024-26602 reduces the ability to abuse the sys_membarrier system call to prevent potential denial-of-service or resource exhaustion attacks. These issues are addressed in the kernel-rt update for Red Hat Enterprise Linux 9.2 Extended Update Support. The update also includes additional bug fixes and requires a system reboot for changes to take effect.

Successful exploitation of CVE-2024-0565 could allow remote code execution via the CIFS filesystem decryption client function. CVE-2024-26602 mitigates the risk of excessive resource consumption or denial-of-service by limiting the ability to hammer the sys_membarrier system call. Red Hat rates the overall security impact as moderate. There are no known exploits in the wild at this time.

Red Hat has released an official security update for kernel-rt in Red Hat Enterprise Linux 9.2 Extended Update Support that addresses these vulnerabilities. Users should apply the update as described in the Red Hat advisory RHSA-2024:1533 and reboot their systems to activate the fixes. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.