The Red Hat Security Advisory RHSA-2026:7013 addresses multiple vulnerabilities in the Linux kernel, including CVE-2025-38154, a use-after-free vulnerability in the BPF sockmap subsystem that can lead to denial of service and privilege escalation. Other fixed issues include use-after-free and double free bugs in various kernel components such as ATM subsystem, exFAT filesystem, bridge multicast, and macvlan. The advisory provides updated kernel packages for Red Hat Enterprise Linux 9.0 and its variants across architectures including x86_64, aarch64, ppc64le, and s390x. The vendor advisory confirms that patches are available and that a system reboot is necessary to apply the fixes. The advisory also references related CVEs and provides instructions for updating the system.

Successful exploitation of the use-after-free vulnerability in the BPF sockmap (CVE-2025-38154) can lead to denial of service conditions or privilege escalation on affected systems. Other kernel vulnerabilities fixed in this advisory may also allow denial of service or other impacts depending on the specific flaw. These vulnerabilities affect the core Linux kernel, which is critical to system operation and security. The overall impact is rated high by Red Hat Product Security.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the available patches promptly by updating their systems using the standard Red Hat update mechanisms. A system reboot is required to complete the installation of the updated kernel and ensure the fixes take effect. No additional mitigations are specified beyond applying the official patches and rebooting.