Loading story…
Red Hat released Important kernel security updates for RHEL 7.7 Advanced Update Support, RHEL 8 Real Time/NFV and 8.10 Extended Life Cycle, and RHEL 9.0 Update Services for SAP Solutions. The updates remediate an uninitialized HID report-buffer flaw (CVE-2024-50302), a use-after-free in CAN BCM processing (CVE-2023-52922), and out-of-bounds access risks in ALSA USB-audio support for Extigy and Mbox devices (CVE-2024-53197).
The RHEL 8 kernel-rt update also fixes CVE-2024-57979, a PPS subsystem use-after-free that can occur when a PPS source is unregistered while character-device operations remain open, potentially causing memory corruption and kernel panic. Organizations should deploy the applicable fixed packages—including kernel-rt-4.18.0-553.44.1.rt7.385.el8_10, kernel-3.10.0-1062.93.1.el7, or kernel-rt-5.14.0-70.125.1.rt21.197.el9_0—and reboot affected hosts to activate the patched kernel; the advisories do not report known in-the-wild exploitation.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued Important-rated RHSA-2025:2512 for the RHEL 9.0 Update Services for SAP Solutions real-time kernel. The update supplied kernel-rt 5.14.0-70.125.1.rt21.197.el9_0 and fixed CVE-2024-50302, CVE-2023-52922, and CVE-2024-53197.
Red Hat released Important-rated RHSA-2025:2514 for RHEL Server 7.7 Advanced Update Support on x86_64, providing kernel version 3.10.0-1062.93.1.el7. It remediated CVE-2024-50302, CVE-2023-52922, and CVE-2024-53197.
Red Hat issued Important-rated RHSA-2025:2474 for RHEL 8 Real Time, Real Time for NFV, and RHEL 8.10 ELS systems. The kernel-rt 4.18.0-553.44.1.rt7.385.el8_10 update fixed CVE-2024-50302, CVE-2024-53197, CVE-2024-57807, and the PPS use-after-free CVE-2024-57979.
Red Hat issued Important-rated RHSA-2025:1254 for RHEL 9.0 Update Services for SAP Solutions on x86_64. The kernel-rt 5.14.0-70.124.1.rt21.196.el9_0 update fixed CVE-2024-53104 in uvcvideo and CVE-2024-53113, a NULL-pointer dereference in alloc_pages_bulk_noprof.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Important-rated Linux kernel updates for RHEL 7 Extended Life Cycle Support, RHEL 8.2 Advanced Update Support, and RHEL 9.0 Update Services for SAP Solutions, including corresponding Real Time kernel packages. The advisories remediate multiple kernel memory-safety and scheduler defects, notably **CVE-2025-38250**, a use-after-free race in the Bluetooth Virtual HCI driver's `vhci_flush()` path, and **CVE-2025-38177**, an unsafe HFSC traffic-control queue notification flaw that could cause repeated state updates and unsafe RB-tree removal. The updates also address double-free, use-after-free, information-disclosure, NFS, ext4, ftrace, AMD TEE, QRTR, and network-scheduler issues, plus **CVE-2022-49991**, in which hugetlb atomic-copy handling could corrupt `page->mapping`. Updated packages include `kernel-3.10.0-1160.137.1.el7` for RHEL 7 ELS, `kernel-4.18.0-193.165.1.el8_2` for RHEL 8.2 AUS, `kernel-rt-3.10.0-1160.137.1.rt56.1289.el7` for RHEL 7 Real Time ELS, and `kernel-rt-5.14.0-70.144.1.rt21.216.el9_0` for RHEL 9 SAP systems; administrators must reboot after installation for the fixes to take effect.
Aug 26, 2026
Red Hat released **RHSA-2023:6901**, an Important security update for the `kernel-rt` package in Red Hat Enterprise Linux 8. The update affects RHEL for Real Time 8, Real Time for NFV 8, and RHEL for x86_64 Extended Life Cycle 8.10, remediating a broad set of kernel memory-safety, race-condition, denial-of-service, information-disclosure, and speculative-execution weaknesses. Organizations should install the applicable updated kernel package and reboot affected hosts for the protections to take effect. Notable issues addressed across the associated RHEL errata include `CVE-2023-31436`, an out-of-bounds access in traffic-control QFQ that can enable local privilege escalation; `CVE-2023-1998`, which can defeat Spectre v2 speculation protections between SMT sibling threads; and Bluetooth L2CAP flaws `CVE-2022-3640` and `CVE-2022-42895`, involving use-after-free and kernel-pointer disclosure. Other fixes cover double-free, buffer-overflow, and device-driver vulnerabilities, including `CVE-2023-1079` in the ASUS HID driver and `CVE-2023-26545` in MPLS. Where patching cannot be immediate, Red Hat documents limited mitigations such as preventing the `usb_8dev` module or affected ASUS HID driver from loading; however, applying the relevant security errata remains the recommended remediation.
Aug 26, 2026
Red Hat released Important security updates for Real Time Linux Kernel packages in Red Hat Enterprise Linux (RHEL) 8.4 and RHEL 9.0 support channels. The updates address multiple kernel memory-safety and logic flaws, including use-after-free vulnerability **CVE-2022-3545** in the Netronome NFP driver, NULL-pointer dereference **CVE-2023-2166** in the CAN protocol implementation, and an out-of-bounds read/possible privilege-escalation issue, **CVE-2023-2176**, in the RDMA Connection Manager. They also remediate **CVE-2022-38096**, a vmwgfx driver NULL-pointer dereference that a local user with access to DRM device nodes could use to crash a host. Affected deployments include RHEL 9.0 Extended Update Support for SAP Solutions using `kernel-rt-5.14.0-70.85.1.rt21.156.el9_0`, and RHEL 8.4 Real Time variants using `kernel-rt-4.18.0-305.125.1.rt7.201.el8_4`, including long-life, telecommunications, and NFV support offerings. The advisories collectively fix additional use-after-free, reference-counting, memory-boundary, networking, netfilter, and local privilege-escalation defects; organizations should apply the applicable kernel-rt update and reboot affected systems to activate the fixes.
Aug 26, 2026