The advisory covers multiple security fixes in the Linux kernel for Red Hat Enterprise Linux 9.4, including CVE-2025-71116 which improves resilience against corrupted osdmaps in libceph, CVE-2026-22984 preventing out-of-bounds reads in handle_auth_done(), CVE-2026-22990 replacing an overzealous BUG_ON in osdmap_apply_incremental(), CVE-2026-43116 ensuring safe access to master conntrack in netfilter ctnetlink, CVE-2026-43158 fixing freemap adjustments in xfs, CVE-2026-43303 clearing page->private in memory management, CVE-2026-46323 addressing a use-after-free in net/gro, CVE-2026-46243 rejecting userspace cifs.spnego descriptions in smb client, CVE-2026-46227 revalidating list cursor in SCTP_SENDALL, and CVE-2026-46125 removing wifi stations if connection preparation fails. These fixes address memory safety issues and logic errors that could lead to kernel crashes or potential security breaches. The advisory also includes bug fixes and performance enhancements. The update is rated as Important by Red Hat and requires a reboot to apply.

The vulnerabilities fixed in this advisory affect core Linux kernel components and could lead to memory corruption issues such as out-of-bounds reads and use-after-free conditions. These issues may cause system instability, crashes, or potentially allow attackers to execute arbitrary code or escalate privileges if exploited. The advisory rates the overall security impact as Important (high severity). No known exploits in the wild have been reported at this time.

Red Hat has released an updated kernel package for Red Hat Enterprise Linux 9.4 that addresses these vulnerabilities. Users should apply the update promptly and reboot their systems to ensure the fixes take effect. For detailed instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. There are no indications that additional mitigations are required beyond applying the official update.