This advisory covers multiple security fixes in the Linux kernel packages for Red Hat Enterprise Linux 10. The fixes include correcting the ordering of iput() and watched_objects decrement (CVE-2024-53143), recovery on rename failures in shmem (CVE-2025-71072), fixing a use-after-free between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415), ensuring unrelated mode changes are not skipped in DSC validation (CVE-2026-31488), limiting next_id allocation to valid ranges in IPC (CVE-2026-52923), adjusting zeroing behavior in slab memory management (CVE-2026-64368), and rejecting oversized nested action attributes in openvswitch (CVE-2026-64531). These fixes address multiple CWE classes including resource management and memory safety issues. The advisory also includes bug fixes and enhancements unrelated to security. The update is available for Red Hat Enterprise Linux 10 and requires a system reboot.

The vulnerabilities fixed in this advisory affect core kernel components, which could potentially impact system stability and security. The issues include use-after-free conditions, improper resource handling, and validation errors that could lead to crashes or other unintended behavior. Red Hat rates the security impact as Important, indicating a high likelihood of security relevance. No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 10 and related CodeReady Linux Builder versions should apply the available updates promptly. A system reboot is required for the updates to take effect. Red Hat recommends treating all kernel errata as security-relevant and advises against delaying updates to reduce exposure.