The Red Hat kernel-rt security update fixes four vulnerabilities in the Real Time Linux Kernel used in Red Hat Enterprise Linux 9.2 Extended Update Support. The addressed issues include: CVE-2024-27415, which ensures multicast packets are confirmed before being passed up the stack in netfilter bridge; CVE-2024-36979, a VLAN use-after-free in the net bridge mst code; CVE-2024-38558, which fixes overwriting the connection tracking original tuple for ICMPv6 in Open vSwitch; and CVE-2024-36270, which causes tproxy to bail out if IP is disabled on the device. These fixes improve kernel network stack robustness and prevent potential memory corruption or logic errors. The advisory states the update must be applied and the system rebooted to activate the patches.

The vulnerabilities affect the kernel-rt packages in Red Hat Enterprise Linux 9.2 Extended Update Support and could lead to memory corruption (use-after-free), incorrect packet processing, or logic errors in network packet handling. This may impact system stability or security in environments relying on the real-time kernel. No known exploits in the wild have been reported. The overall security impact is rated moderate by Red Hat.

Red Hat has released an official security update (RHSA-2024:7490) that addresses these vulnerabilities. Users should apply the kernel-rt update for Red Hat Enterprise Linux 9.2 Extended Update Support as soon as possible and reboot the system to ensure the fixes take effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigations are specified beyond applying the official patch and rebooting.