This Red Hat security advisory addresses numerous vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 10. Notable fixes include: an out-of-bounds read in the Qualcomm socinfo driver (CVE-2024-58007), a buffer overflow causing denial of service in the t7xx WWAN driver (CVE-2026-23172), multiple use-after-free vulnerabilities in ALSA timer and net ena PHC components (CVE-2026-53192, CVE-2026-68200, CVE-2026-52971), denial of service via out-of-range packet types in the ice driver (CVE-2026-68128), and a use-after-free in the ath9k Wi-Fi driver leading to system crashes (CVE-2026-68363). The advisory also includes fixes for other kernel subsystems such as IB/isert, mac80211, netfilter, and dm_early_create. These vulnerabilities collectively impact kernel stability and security, including potential privilege escalation and denial of service. The advisory includes bug fixes and enhancements for related components. The update requires a system reboot to take effect.

The vulnerabilities fixed in this advisory affect the Linux kernel, a core component of the operating system, and include issues that could lead to denial of service, privilege escalation, system crashes, and information disclosure. These issues can impact system stability and security, potentially allowing attackers to disrupt services or escalate privileges. The advisory rates the overall security impact as Important. No known exploits in the wild have been reported at this time.

Red Hat has released an official update for the Linux kernel packages in Red Hat Enterprise Linux 10 that addresses these vulnerabilities. Users should apply the update promptly and reboot their systems to ensure the fixes take effect. Red Hat recommends treating all kernel errata as security-relevant and advises against delaying updates to avoid exposure to known vulnerabilities.