This advisory addresses five security vulnerabilities in the Red Hat kernel-rt packages: CVE-2025-22004 (use-after-free in lec_send()), CVE-2025-22121 (out-of-bound read in ext4_xattr_inode_dec_ref_all()), CVE-2025-22104 (improper hex dump handling in ibmvnic), CVE-2025-23150 (off-by-one error in ext4 do_split()), and CVE-2025-37803 (buffer size overflow during udmabuf creation). These issues affect the Real Time Linux Kernel used for high determinism requirements. The advisory provides updated packages for Red Hat Enterprise Linux 9.2 variants and requires rebooting the system after applying the update. Detailed CVSS scores and impact specifics are referenced on the individual CVE pages.

The vulnerabilities include memory corruption issues such as use-after-free, out-of-bound read, off-by-one error, and buffer overflow, which could potentially lead to system instability or security breaches if exploited. The advisory rates the overall impact as Important, indicating a high severity level that could affect system reliability and security in environments using the kernel-rt packages.

Red Hat has released updated kernel-rt packages for affected Red Hat Enterprise Linux 9.2 variants. Applying these updates and rebooting the system is required to remediate the vulnerabilities. Users should follow the instructions in the Red Hat advisory RHSA-2025:11572 and the referenced article https://access.redhat.com/articles/11258 for update procedures. No additional mitigations are specified beyond applying the official update and rebooting.