Red Hat Security Advisory: kernel-rt security update
A security advisory from Red Hat addresses multiple vulnerabilities in the kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The update fixes 14 distinct security issues including use-after-free, lock inversion deadlocks, unsafe memory reads, malformed packet handling, and potential crashes. These vulnerabilities affect Red Hat Enterprise Linux 9.2 Extended Update Support versions. The advisory rates the overall impact as moderate and requires a system reboot after applying the update.
AI Analysis
Technical Summary
This Red Hat security advisory (RHSA-2024:6268) covers a security update for the kernel-rt packages in Red Hat Enterprise Linux 9.2 Extended Update Support. It addresses 14 vulnerabilities including CVE-2024-26946 (unsafe kernel memory read), CVE-2024-35839 (netfilter bridge info fix), CVE-2024-35895 (lock inversion deadlock in BPF sockmap), CVE-2024-35875 (RNG seeding on CoCo systems), CVE-2024-38570 (glock use-after-free), CVE-2024-38540 (undefined behavior in bnxt_qplib), CVE-2024-39502 (use-after-free in ionic driver), CVE-2024-40914 (memory unpoisoning issue), CVE-2024-40956 (use-after-free in dmaengine), CVE-2024-40978 (crash in qedi debugfs), CVE-2024-40983 (reference count fix in tipc), CVE-2024-41044 (malformed PPP packets), CVE-2024-42102 (reverted writeback fix), and CVE-2024-42131 (overflow in dirty throttling). The advisory provides patches for these issues and requires rebooting the system to apply the fixes.
Potential Impact
The vulnerabilities collectively could lead to kernel crashes, use-after-free conditions, deadlocks, unsafe memory access, and improper handling of malformed packets. These issues may affect system stability and security, potentially allowing attackers to cause denial of service or other unintended behavior. The overall security impact is rated as moderate by Red Hat.
Mitigation Recommendations
Red Hat has released an official security update for kernel-rt packages in Red Hat Enterprise Linux 9.2 Extended Update Support that addresses all listed vulnerabilities. Users should apply the update promptly and reboot their systems to ensure the fixes take effect. For detailed update instructions, refer to Red Hat's official advisory at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches and rebooting.
Red Hat Security Advisory: kernel-rt security update
Description
A security advisory from Red Hat addresses multiple vulnerabilities in the kernel-rt packages, which provide the Real Time Linux Kernel for systems requiring high determinism. The update fixes 14 distinct security issues including use-after-free, lock inversion deadlocks, unsafe memory reads, malformed packet handling, and potential crashes. These vulnerabilities affect Red Hat Enterprise Linux 9.2 Extended Update Support versions. The advisory rates the overall impact as moderate and requires a system reboot after applying the update.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory (RHSA-2024:6268) covers a security update for the kernel-rt packages in Red Hat Enterprise Linux 9.2 Extended Update Support. It addresses 14 vulnerabilities including CVE-2024-26946 (unsafe kernel memory read), CVE-2024-35839 (netfilter bridge info fix), CVE-2024-35895 (lock inversion deadlock in BPF sockmap), CVE-2024-35875 (RNG seeding on CoCo systems), CVE-2024-38570 (glock use-after-free), CVE-2024-38540 (undefined behavior in bnxt_qplib), CVE-2024-39502 (use-after-free in ionic driver), CVE-2024-40914 (memory unpoisoning issue), CVE-2024-40956 (use-after-free in dmaengine), CVE-2024-40978 (crash in qedi debugfs), CVE-2024-40983 (reference count fix in tipc), CVE-2024-41044 (malformed PPP packets), CVE-2024-42102 (reverted writeback fix), and CVE-2024-42131 (overflow in dirty throttling). The advisory provides patches for these issues and requires rebooting the system to apply the fixes.
Potential Impact
The vulnerabilities collectively could lead to kernel crashes, use-after-free conditions, deadlocks, unsafe memory access, and improper handling of malformed packets. These issues may affect system stability and security, potentially allowing attackers to cause denial of service or other unintended behavior. The overall security impact is rated as moderate by Red Hat.
Mitigation Recommendations
Red Hat has released an official security update for kernel-rt packages in Red Hat Enterprise Linux 9.2 Extended Update Support that addresses all listed vulnerabilities. Users should apply the update promptly and reboot their systems to ensure the fixes take effect. For detailed update instructions, refer to Red Hat's official advisory at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches and rebooting.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:6268
- Cve Count
- 14
- Additional Cves
- ["CVE-2024-35839","CVE-2024-35875","CVE-2024-35895","CVE-2024-38540","CVE-2024-38570","CVE-2024-39502","CVE-2024-40914","CVE-2024-40956","CVE-2024-40978","CVE-2024-40983","CVE-2024-41044","CVE-2024-42102","CVE-2024-42131"]
Threat ID: 6a3da1f04853345fc1832533
Added to database: 06/25/2026, 21:47:28 UTC
Last enriched: 08/19/2026, 15:24:48 UTC
Last updated: 09/10/2026, 19:36:47 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.