This Red Hat security advisory addresses multiple vulnerabilities in the Linux kernel for RHEL 9.6 Extended Update Support. Key fixes include use-after-free vulnerabilities in the smc subsystem (CVE-2025-40064, CVE-2025-40168), denial of service in libceph OSD client (CVE-2026-23136), safe access enforcement in netfilter ctnetlink (CVE-2026-43116), freemap adjustment fixes in xfs (CVE-2026-43158), clearing page private data in memory management (CVE-2026-43303), extension of writable skb range in net scheduling (CVE-2026-46331), use-after-free in net/gro (CVE-2026-46323), rejection of userspace cifs.spnego descriptions in smb client (CVE-2026-46243), workqueue list corruption fix in RDMA/iwcm (CVE-2026-45898), and wifi mac80211 fixes (CVE-2026-46125, CVE-2026-46166). The advisory also includes various bug fixes and enhancements related to performance and driver stability. The update requires a system reboot to apply.

The vulnerabilities fixed in this advisory include use-after-free bugs that could lead to memory corruption, denial of service conditions, and potential instability in kernel subsystems such as networking, storage, and wireless. These issues could impact system reliability and security if exploited. The advisory rates the overall security impact as Important (high severity). No known exploits in the wild have been reported at this time.

A security update for the Linux kernel packages is available from Red Hat for RHEL 9.6 Extended Update Support. Users should apply the update promptly and reboot their systems to ensure the fixes take effect. Refer to Red Hat's official advisory and update instructions at https://access.redhat.com/articles/11258 for detailed guidance. No additional mitigation steps are specified beyond applying the official update and rebooting.