RHSA-2025:22124 — Security Advisory

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)

• kernel: smb: client: fix potential UAF in cifs_stats_proc_write() (CVE-2024-35868)

• kernel: ethtool: check device is present when getting link settings (CVE-2024-46679)

• kernel: ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CVE-2025-38729)

• kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702)

• kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)

• kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)

• kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)

• kernel: wifi: mac80211: check S1G action frame size (CVE-2023-53257)

• kernel: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CVE-2023-53297)

• kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)

• kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (CVE-2023-53365)

• kernel: Bluetooth: L2CAP: Fix user-after-free (CVE-2022-50386)

• kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.