Red Hat Security Advisory: kernel security, bug fix, and enhancement update

The advisory covers a set of security fixes and bug corrections in the Linux kernel for Red Hat Enterprise Linux 8, including CVE-2024-57849 which handles CPU hotplug removal during sampling on s390 architecture, and multiple other CVEs addressing use-after-free vulnerabilities (e.g., in bonding, zram, pNFS, and IPv6 subsystems), out-of-bounds array access, and permission mask issues in NFSv4. Additionally, it fixes a Safe RET Interrupt vulnerability (CVE-2026-68480) on AMD processors. The update also includes bug fixes and enhancements related to kernel panic and buffer underflow issues. The kernel is a critical component of the OS, and these fixes improve overall system security and stability.

The vulnerabilities fixed in this advisory could lead to use-after-free conditions, out-of-bounds memory writes, and improper permission checks within the kernel, potentially allowing local or remote attackers to cause system crashes, privilege escalation, or unauthorized access to kernel memory. Given the kernel's fundamental role, these issues pose a significant risk to system integrity and security if left unpatched.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 8 that address these vulnerabilities. Users should apply the available kernel updates promptly and reboot their systems to ensure the fixes take effect. Red Hat treats all kernel errata as security-relevant and strongly advises against delaying updates to avoid exposure to these vulnerabilities.