This advisory covers a security update for the kernel-rt packages in Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. It addresses seven vulnerabilities: CVE-2024-57980 (double free in uvcvideo media driver), CVE-2025-21759 (extended RCU protection in IPv6 multicast), CVE-2025-21905 (limiting printed strings from firmware in iwlwifi), CVE-2025-22113 (avoiding journaling superblock updates on error in ext4), CVE-2025-37958 (fixing invalid pmd migration entry dereference), CVE-2025-38001 (reentrant enqueue in net_sched hfsc), and CVE-2025-38052 (slab use-after-free in net/tipc). These vulnerabilities affect kernel stability and security by potentially causing memory corruption or crashes. The update is provided by Red Hat with instructions to reboot the system after applying the patch.

The vulnerabilities fixed include memory management errors such as double free and use-after-free, which can lead to kernel crashes or potential escalation of privileges. Other fixes address race conditions and invalid memory dereferences that could affect system stability and security. The overall impact is rated as Important by Red Hat, indicating significant security concerns but no confirmed exploits in the wild at the time of the advisory.

Red Hat has released an updated kernel-rt package for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions that addresses these vulnerabilities. Users should apply the update as described in the Red Hat advisory (https://access.redhat.com/articles/11258) and reboot their systems to ensure the fixes take effect. No alternative mitigations are indicated; patching and rebooting is required.