The Red Hat kernel-rt security update fixes three vulnerabilities: CVE-2024-40906 addresses a flaw where the health timer in the mlx5 network driver was not always stopped during driver removal; CVE-2024-44970 corrects an invalid unlink operation in the mlx5e SHAMPO work queue linked list; CVE-2025-21756 ensures that the vsock socket binding is maintained until socket destruction. These issues could lead to stability or security problems in systems using the Real Time Linux Kernel. The update is rated as Important by Red Hat Product Security and applies to Red Hat Enterprise Linux for Real Time 8 and related products.

The vulnerabilities fixed could cause improper handling of kernel timers, invalid linked list operations, and premature socket binding release, potentially leading to system instability or security risks in environments relying on the Real Time Linux Kernel. The advisory rates the impact as Important (high severity). No known exploits in the wild have been reported at this time.

An official security update is available from Red Hat for the kernel-rt packages. Users should apply the update as described in the Red Hat advisory RHSA-2025:8057 and reboot the system to ensure the fixes take effect. Refer to https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigations are indicated by the vendor.