This advisory covers seven security fixes in the Linux kernel for Red Hat Enterprise Linux 9.2 Extended Update Support. The vulnerabilities include: CVE-2024-26642 and CVE-2024-26643 addressing netfilter nf_tables anonymous set handling; CVE-2024-26673 sanitizing protocol numbers in nft_ct custom expectations; CVE-2024-26735 fixing a use-after-free and null pointer dereference in IPv6 segment routing; CVE-2024-26804 preventing perpetual headroom growth in IP tunnels; CVE-2024-26828 fixing an underflow in CIFS server interface parsing; and CVE-2024-26993 addressing a reference leak in sysfs active protection. These fixes are delivered via updated kernel packages requiring a system reboot. The advisory rates the overall impact as moderate and does not report known exploits in the wild.

The vulnerabilities affect core Linux kernel components, potentially leading to issues such as memory corruption, use-after-free, null pointer dereference, and resource leaks. These could impact system stability and security, but the advisory rates the overall security impact as moderate. No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 9.2 Extended Update Support should apply the provided kernel updates promptly and reboot their systems to activate the fixes. No additional mitigation steps are indicated by the vendor advisory.