Red Hat Security Advisory: kernel-rt security update
This advisory addresses multiple security vulnerabilities in the Red Hat kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The issues fixed include out-of-bounds (OOB) writes in BPF devmap and XSK map deletion operations, and a use-after-free (UAF) vulnerability in the MD subsystem while iterating device lists. The update is rated as having a moderate security impact. Systems must be rebooted after applying the update for the fixes to take effect.
AI Analysis
Technical Summary
Red Hat Product Security issued an advisory (RHSA-2025:10536) for kernel-rt packages in Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle 9.2. The update fixes three vulnerabilities: CVE-2024-56615 (OOB writes in BPF devmap during element deletion), CVE-2024-56614 (OOB writes in XSK map during element deletion), and CVE-2025-22126 (use-after-free in mddev while iterating the all_mddevs list). These vulnerabilities could lead to memory corruption issues. The advisory provides updated kernel-rt packages and requires a system reboot to apply the fixes. No CVSS scores are provided in the advisory, but the impact is rated moderate by Red Hat.
Potential Impact
The vulnerabilities involve out-of-bounds memory writes and use-after-free conditions in kernel subsystems related to BPF, XSK, and MD device management. Such issues can cause memory corruption, potentially leading to system instability or escalation of privileges if exploited. However, the advisory rates the overall security impact as moderate and does not report known exploits in the wild.
Mitigation Recommendations
A security update for the kernel-rt packages is available from Red Hat (RHSA-2025:10536). Users should apply the update for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle 9.2 as soon as possible. A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: kernel-rt security update
Description
This advisory addresses multiple security vulnerabilities in the Red Hat kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The issues fixed include out-of-bounds (OOB) writes in BPF devmap and XSK map deletion operations, and a use-after-free (UAF) vulnerability in the MD subsystem while iterating device lists. The update is rated as having a moderate security impact. Systems must be rebooted after applying the update for the fixes to take effect.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Product Security issued an advisory (RHSA-2025:10536) for kernel-rt packages in Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle 9.2. The update fixes three vulnerabilities: CVE-2024-56615 (OOB writes in BPF devmap during element deletion), CVE-2024-56614 (OOB writes in XSK map during element deletion), and CVE-2025-22126 (use-after-free in mddev while iterating the all_mddevs list). These vulnerabilities could lead to memory corruption issues. The advisory provides updated kernel-rt packages and requires a system reboot to apply the fixes. No CVSS scores are provided in the advisory, but the impact is rated moderate by Red Hat.
Potential Impact
The vulnerabilities involve out-of-bounds memory writes and use-after-free conditions in kernel subsystems related to BPF, XSK, and MD device management. Such issues can cause memory corruption, potentially leading to system instability or escalation of privileges if exploited. However, the advisory rates the overall security impact as moderate and does not report known exploits in the wild.
Mitigation Recommendations
A security update for the kernel-rt packages is available from Red Hat (RHSA-2025:10536). Users should apply the update for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle 9.2 as soon as possible. A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:10536
- Cve Count
- 3
- Additional Cves
- ["CVE-2024-56615","CVE-2025-22126"]
Threat ID: 6a3da1e84853345fc182eebf
Added to database: 06/25/2026, 21:47:20 UTC
Last enriched: 06/25/2026, 22:36:24 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 20
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.