The Red Hat kernel-rt security update addresses six vulnerabilities: CVE-2025-37810 fixes a USB gadget event count buffer overflow check; CVE-2025-38200 corrects invalid MMIO write access in the i40e driver; CVE-2025-38461 resolves a TOCTOU race condition in vsock transport; CVE-2025-38449 ensures proper reference acquisition on GEM handles for framebuffers; CVE-2025-38472 fixes a crash caused by removal of an uninitialized netfilter nf_conntrack entry; and CVE-2025-38527 corrects a use-after-free in the SMB client cifs_oplock_break function. These fixes improve kernel stability and security for real-time Linux deployments. The update is for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle 9.2 x86_64. The vendor advisory requires a system reboot to apply the update.

The vulnerabilities collectively could lead to system crashes, memory corruption, race conditions, and use-after-free issues in the kernel-rt environment, potentially affecting system stability and security. The advisory classifies the overall security impact as moderate. No known exploits in the wild have been reported at this time.

Red Hat has released an official security update for kernel-rt packages addressing these vulnerabilities. Users should apply the update as detailed in the Red Hat advisory (https://access.redhat.com/articles/11258) and reboot their systems to ensure the fixes take effect. This is the recommended and official remediation.