The vulnerability CVE-2024-40989 affects the kernel-rt packages of Red Hat Enterprise Linux 9.2, specifically the KVM component on arm64 platforms. The issue concerns improper disassociation of virtual CPUs from the redistributor region during teardown, which could potentially lead to security concerns as indicated by the CWE-825 classification. Red Hat has issued a security advisory (RHSA-2024:11483) and released updated kernel-rt packages to address this vulnerability. The advisory rates the impact as moderate and recommends applying the update and rebooting the system to activate the fix.

The vulnerability affects the kernel-rt real-time Linux kernel on arm64 architectures within Red Hat Enterprise Linux 9.2. The security impact is rated moderate by Red Hat. No known exploits in the wild have been reported. The issue relates to the KVM virtualization subsystem and could affect system stability or security in environments using real-time kernel features and virtualization on arm64 hardware.

Red Hat has released an official security update for kernel-rt in Red Hat Enterprise Linux 9.2 Extended Update Support that addresses CVE-2024-40989. Users should apply the update as detailed in Red Hat advisory RHSA-2024:11483 and reboot affected systems to ensure the fix is active. No additional mitigation steps are indicated by the vendor.