What is RHSA-2025:0066?

RHSA-2025:0066 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: kernel-rt security update

Which CVE IDs does RHSA-2025:0066 cover?

RHSA-2025:0066 covers the following CVE IDs: CVE-2024-53088, CVE-2024-53122. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2025:0066?

RHSA-2025:0066 has a CVSS v3 base score of 5.9, published by Red Hat Product Security.

Which products are affected by RHSA-2025:0066?

RHSA-2025:0066 affects 32 products, including: Red Hat Enterprise Linux NFV (v. 8); Red Hat Enterprise Linux RT (v. 8); kernel-rt-0:4.18.0-553.34.1.rt7.375.el8_10.src as a component of Red Hat Enterprise Linux NFV (v. 8); kernel-rt-0:4.18.0-553.34.1.rt7.375.el8_10.src as a component of Red Hat Enterprise Linux RT (v. 8); kernel-rt-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8); and others — see the full list on the advisory page.

RHSA-2025:0066HighCVSS 5.9

Red Hat Security Advisory: kernel-rt security update

Vendor

Red Hat Product Security

Published

January 8, 2025

Last Modified

September 28, 2026

🔗 CVE IDs covered (2)

CVE-2024-53088 →CVE-2024-53122 →

📋 Description

CVE-2024-53088 — kernel: i40e: fix race condition by adding filter's intermediate sync state CVE-2024-53122 — kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust

🎯 Affected products32

Red Hat Enterprise Linux NFV (v. 8)
Red Hat Enterprise Linux RT (v. 8)
kernel-rt-0:4.18.0-553.34.1.rt7.375.el8_10.src as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-0:4.18.0-553.34.1.rt7.375.el8_10.src as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-core-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-core-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-debug-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-debug-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-debug-core-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-debug-core-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-debug-debuginfo-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-debug-debuginfo-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-debug-devel-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-debug-devel-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-debug-kvm-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-debug-modules-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-debug-modules-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-debug-modules-extra-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-debug-modules-extra-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-debuginfo-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-debuginfo-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-devel-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-devel-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
kernel-rt-kvm-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-modules-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
kernel-rt-modules-0:4.18.0-553.34.1.rt7.375.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
+2 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: Prevent the `i40e` kernel module from loading if Intel 700 series network adapters are not present or required on the host. 1. Blacklist the driver by creating a configuration file in `/etc/modprobe.d/`: ``` echo "install i40e /bin/true" >> /etc/modprobe.d/disable-i40e.conf ``` 2. If the driver is already loaded and not actively bound to essential network interfaces, remove it: ``` rmmod i40e ``` Caveat: Disabling this module prevents Intel Ethernet 700 Series network interfaces from functioning. If the driver is currently in use, unloading it will require a system reboot or network service reload, leading to temporary network downtime. Workaround: If enabled, you may disable MPTCP support. For more information please read https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/getting-started-with-multipath-tcp_configuring-and-managing-networking#preparing-rhel-to-enable-mptcp-support_getting-started-with-multipath-tcp

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products32

✅ Remediation

🔗 References (5)