RLSA-2025:9581
RLSA-2025:9581 · Moderate: kernel-rt security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: cifs: fix double free race when mount fails in cifs_get_root() (CVE-2022-48919) * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301) * kernel: idpf: fix idpf_vc_core_init error path (CVE-2024-53064) * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.1 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-rt Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:4.18.0-553.58.1.rt7.399.el8_10
Update to 0:4.18.0-553.58.1.rt7.399.el8_10
Original sources
- https://errata.rockylinux.org/RLSA-2025:9581
- https://bugzilla.redhat.com/show_bug.cgi?id=2307172
- https://bugzilla.redhat.com/show_bug.cgi?id=2327188
- https://bugzilla.redhat.com/show_bug.cgi?id=2327347
- https://bugzilla.redhat.com/show_bug.cgi?id=2348575
- https://bugzilla.redhat.com/show_bug.cgi?id=2373362
- https://osv.dev/vulnerability/RLSA-2025:9581