Red Hat Security Advisory: kernel-rt security update
Red Hat has issued a security advisory for the kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The update addresses two use-after-free vulnerabilities: one in the RDMA/iwcm component after cm_id destruction (CVE-2025-38211), and another in the tipc_conn_close() function (CVE-2025-38464). These vulnerabilities could lead to memory corruption issues. The advisory rates the security impact as Moderate. A patch is available and applying the update requires a system reboot. The affected products include Red Hat Enterprise Linux for Real Time 8 and related variants.
AI Analysis
Technical Summary
This advisory covers two use-after-free vulnerabilities in the Red Hat kernel-rt packages. CVE-2025-38211 fixes a use-after-free of work objects in the RDMA/iwcm subsystem after cm_id destruction. CVE-2025-38464 addresses a use-after-free in the tipc_conn_close() function. Both vulnerabilities relate to improper memory handling that could lead to instability or potential exploitation. Red Hat has released updated kernel-rt packages for Red Hat Enterprise Linux 8 Real Time variants to remediate these issues. The update is rated with moderate severity and requires rebooting the system to apply.
Potential Impact
The vulnerabilities involve use-after-free conditions in kernel components, which can cause memory corruption. This may lead to system instability or potential escalation of privileges if exploited. However, the advisory rates the impact as Moderate, indicating a limited but meaningful security risk. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released an official security update for the kernel-rt packages that addresses these vulnerabilities. Users should apply the update as per Red Hat's instructions available at https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: kernel-rt security update
Description
Red Hat has issued a security advisory for the kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The update addresses two use-after-free vulnerabilities: one in the RDMA/iwcm component after cm_id destruction (CVE-2025-38211), and another in the tipc_conn_close() function (CVE-2025-38464). These vulnerabilities could lead to memory corruption issues. The advisory rates the security impact as Moderate. A patch is available and applying the update requires a system reboot. The affected products include Red Hat Enterprise Linux for Real Time 8 and related variants.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers two use-after-free vulnerabilities in the Red Hat kernel-rt packages. CVE-2025-38211 fixes a use-after-free of work objects in the RDMA/iwcm subsystem after cm_id destruction. CVE-2025-38464 addresses a use-after-free in the tipc_conn_close() function. Both vulnerabilities relate to improper memory handling that could lead to instability or potential exploitation. Red Hat has released updated kernel-rt packages for Red Hat Enterprise Linux 8 Real Time variants to remediate these issues. The update is rated with moderate severity and requires rebooting the system to apply.
Potential Impact
The vulnerabilities involve use-after-free conditions in kernel components, which can cause memory corruption. This may lead to system instability or potential escalation of privileges if exploited. However, the advisory rates the impact as Moderate, indicating a limited but meaningful security risk. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released an official security update for the kernel-rt packages that addresses these vulnerabilities. Users should apply the update as per Red Hat's instructions available at https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:15009
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-38464"]
- Cvss Version
- null
Threat ID: 6a3da1e54853345fc182d788
Added to database: 06/25/2026, 21:47:17 UTC
Last enriched: 06/25/2026, 22:32:21 UTC
Last updated: 07/01/2026, 21:51:10 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.