The advisory covers two kernel vulnerabilities in Red Hat Enterprise Linux 9. CVE-2026-31411 is a crash issue in the ATM networking subsystem due to an unvalidated virtual channel connection pointer in the sigd_send() function. CVE-2026-43198 addresses a potential race condition in the tcp_v6_syn_recv_sock() function, which handles TCP IPv6 SYN packets. The update fixes these issues along with other bug fixes and enhancements. The vendor rates the security impact as Important and provides updated kernel packages for multiple architectures and variants of RHEL 9. The update requires a system reboot.

Successful exploitation of CVE-2026-31411 could cause a kernel crash due to unvalidated pointer dereference in ATM networking code, potentially leading to denial of service. CVE-2026-43198 involves a race condition in TCP IPv6 connection handling, which could affect kernel stability or networking reliability. The advisory does not report known exploits in the wild. The overall impact is rated as Important by Red Hat, indicating a significant security concern but not critical.

Red Hat has released updated kernel packages that fix these vulnerabilities. Users should apply the kernel update as provided in the advisory RHSA-2026:33285 and reboot their systems to activate the fixes. Detailed update instructions are available at https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are specified.