The advisory details fixes for ten CVEs affecting the Linux kernel in Red Hat Enterprise Linux 9.4, primarily involving use-after-free vulnerabilities in Bluetooth SCO components (CVE-2024-27398, CVE-2024-50125, CVE-2026-31408), an IMA_DIGSIG flag handling flaw (CVE-2025-68183), netfilter connection tracking helper cleanup (CVE-2026-43027), ALSA usb-audio out-of-bounds writes (CVE-2026-43279), and other memory management issues such as double free and validation errors. These vulnerabilities could impact kernel stability and security. The advisory includes bug fixes and enhancements to prevent kernel panics and improve cryptographic module behavior. The update is rated as Important by Red Hat Product Security and applies to multiple architectures of RHEL 9.4. A reboot is required to apply the fixes.

The vulnerabilities fixed include use-after-free bugs that could lead to memory corruption or kernel crashes, potentially affecting system stability and security. The issues span Bluetooth SCO handling, kernel integrity measurement architecture flags, network connection tracking, USB audio processing, distributed lock manager validation, filesystem inline data handling, Wi-Fi packet processing, and RDMA context allocation. Exploitation could result in denial of service or privilege escalation depending on the specific flaw. No known exploits in the wild have been reported at this time.

A security update for the Linux kernel packages is available from Red Hat for Red Hat Enterprise Linux 9.4. Applying this update and rebooting the system is required to remediate the listed vulnerabilities. Refer to the official Red Hat advisory RHSA-2026:36767 and the update article https://access.redhat.com/articles/11258 for detailed instructions. No additional mitigation steps are indicated beyond applying the vendor-provided patch and rebooting.