Red Hat Security Advisory: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211) * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
This advisory covers two use-after-free vulnerabilities in the Red Hat kernel-rt packages. CVE-2025-38211 fixes a use-after-free of work objects in the RDMA/iwcm subsystem after cm_id destruction. CVE-2025-38464 addresses a use-after-free in the tipc_conn_close() function. Both vulnerabilities relate to improper memory handling that could lead to instability or potential exploitation. Red Hat has released updated kernel-rt packages for Red Hat Enterprise Linux 8 Real Time variants to remediate these issues. The update is rated with moderate severity and requires rebooting the system to apply.
Potential Impact
The vulnerabilities involve use-after-free conditions in kernel components, which can cause memory corruption. This may lead to system instability or potential escalation of privileges if exploited. However, the advisory rates the impact as Moderate, indicating a limited but meaningful security risk. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released an official security update for the kernel-rt packages that addresses these vulnerabilities. Users should apply the update as per Red Hat's instructions available at https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: kernel-rt security update
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211) * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers two use-after-free vulnerabilities in the Red Hat kernel-rt packages. CVE-2025-38211 fixes a use-after-free of work objects in the RDMA/iwcm subsystem after cm_id destruction. CVE-2025-38464 addresses a use-after-free in the tipc_conn_close() function. Both vulnerabilities relate to improper memory handling that could lead to instability or potential exploitation. Red Hat has released updated kernel-rt packages for Red Hat Enterprise Linux 8 Real Time variants to remediate these issues. The update is rated with moderate severity and requires rebooting the system to apply.
Potential Impact
The vulnerabilities involve use-after-free conditions in kernel components, which can cause memory corruption. This may lead to system instability or potential escalation of privileges if exploited. However, the advisory rates the impact as Moderate, indicating a limited but meaningful security risk. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released an official security update for the kernel-rt packages that addresses these vulnerabilities. Users should apply the update as per Red Hat's instructions available at https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:15009
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-38464"]
Threat ID: 6a3da1e54853345fc182d788
Added to database: 06/25/2026, 21:47:17 UTC
Last enriched: 06/25/2026, 22:32:21 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 73
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.