This security advisory from Red Hat addresses two vulnerabilities in the kernel-rt packages used in Red Hat Enterprise Linux 8.4 Real Time. CVE-2024-53141 fixes a missing range check in the netfilter ipset bitmap_ip_uadt function, which is a CWE-20 (Improper Input Validation) issue. CVE-2025-21756 resolves a use-after-free condition (CWE-416) in the vsock component by ensuring the socket binding is maintained until socket destruction. The advisory provides updated kernel-rt packages that fix these issues and requires rebooting the system to apply the changes. The update is rated as having an important security impact by Red Hat Product Security.

The vulnerabilities could potentially lead to improper handling of network packet sets and socket bindings in the Real Time Linux Kernel, which may affect system stability or security. Red Hat classifies the impact as important, indicating a significant security concern but not necessarily critical. No known exploits in the wild have been reported at the time of the advisory.

Red Hat has released updated kernel-rt packages that fix these vulnerabilities. Users of affected Red Hat Enterprise Linux 8.4 Real Time variants should apply the provided security update and reboot their systems to ensure the fixes take effect. For detailed update instructions, refer to the Red Hat article at https://access.redhat.com/articles/11258. There is no indication that additional mitigations are required beyond applying the official update and rebooting.