[Apollo] Advisories Statistics light light Login

RLSA-2025:13590

Security Mirrored from RHSA-2025:13590
Issued at: 2025-09-08
Updated at: 2025-09-08

Synopsis

Moderate: kernel-rt security update



Description

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

* kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

* kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

* kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

* kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

* kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

* kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

* kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)

* kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 8 x86_64

Fixes

2348516 2348596 2360786 2375304 2376064

CVEs

CVE-2021-47670 CVE-2025-21727 CVE-2025-21759 CVE-2025-38085 CVE-2025-38159

Affected packages

Rocky Linux 8 x86_64 - NFV

kernel-rt-0:4.18.0-553.69.1.rt7.410.el8_10.src.rpm kernel-rt-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-core-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-core-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-debuginfo-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-devel-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debuginfo-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-kvm-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-modules-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-modules-extra-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-devel-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-kvm-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-modules-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-modules-extra-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm

Rocky Linux 8 x86_64 - RT

kernel-rt-0:4.18.0-553.69.1.rt7.410.el8_10.src.rpm kernel-rt-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-core-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-core-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-debuginfo-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-devel-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debuginfo-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-modules-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-debug-modules-extra-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-devel-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-kvm-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-modules-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm kernel-rt-modules-extra-0:4.18.0-553.69.1.rt7.410.el8_10.x86_64.rpm