This advisory addresses several security flaws in the Real Time Linux Kernel (kernel-rt) packages for Red Hat Enterprise Linux. Notably, CVE-2025-40026 fixes an issue in the KVM x86 code where L1 intercepts were improperly (re)checked during userspace I/O completion. Other fixes include correcting an out-of-bounds write in device mapper logging due to region_count overflow (CVE-2026-53059) and a double-free vulnerability in the TIPC buffer append function (CVE-2026-52993). The update is rated as important by Red Hat and requires a system reboot. The vendor advisory confirms that patches are available and strongly recommends timely application of these updates to maintain system security.

The vulnerabilities affect the Linux kernel's core components used in real-time environments, potentially allowing attackers to cause memory corruption (out-of-bounds write, double-free) or improper handling of kernel operations (KVM intercepts). These issues could lead to system instability or compromise. However, there are no known exploits in the wild at this time. The impact is rated as high due to the kernel's critical role in system security and stability.

A patch is available from Red Hat and should be applied promptly. The update requires a system reboot to take effect. Red Hat advises treating all kernel errata as security-relevant and recommends not delaying updates. Follow the official Red Hat advisory instructions for applying the update: https://access.redhat.com/articles/11258. No additional mitigations are specified beyond applying the official patch and rebooting.