This advisory covers security fixes for the kernel-rt packages in Red Hat Enterprise Linux 9.2. The first fix (CVE-2024-47745) ensures that the security_mmap_file() Linux Security Module hook is called during remap_file_pages() operations in the kernel memory management subsystem, addressing a potential security oversight. The second fix (CVE-2025-21756) corrects the vsock implementation to maintain socket binding until socket destruction, preventing premature release of resources. Both vulnerabilities are rated as important by Red Hat Product Security. The advisory references updated kernel-rt packages that include these fixes and requires a system reboot to activate the patches.

The vulnerabilities affect the kernel-rt packages used in Red Hat Enterprise Linux 9.2 for real-time kernel operations. The first vulnerability (CVE-2024-47745) relates to a missing security hook call in memory remapping, which could potentially allow security policy bypass or improper memory access control. The second vulnerability (CVE-2025-21756) involves improper handling of vsock socket bindings, which could lead to resource management issues. Red Hat rates these issues as having an important security impact, indicating a significant but not critical risk. No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel-rt packages for Red Hat Enterprise Linux 9.2 Extended Update Support and Extended Life Cycle that address these vulnerabilities. Users should apply the security update as detailed in the Red Hat advisory RHSA-2025:7676 and reboot affected systems to ensure the fixes take effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches and rebooting.