This Red Hat security advisory addresses several vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9 and 10. Key fixes include zero-initializing memory allocated via sock_kmalloc to prevent potential security issues (CVE-2025-71113), resolving race conditions in SCSI error handling (CVE-2026-23110), fixing use-after-free bugs in various kernel components including cxl/port and Bluetooth L2CAP (CVE-2026-31530, CVE-2026-53071), correcting false positives in fanotify permission events (CVE-2026-46150), and addressing denial of service due to memory leaks (CVE-2025-71147). The advisory also includes multiple other security fixes and bug enhancements. The update is rated as Important by Red Hat Product Security and requires a system reboot after installation.

The vulnerabilities fixed in this advisory could lead to potential security issues such as memory corruption, use-after-free conditions, denial of service, and incorrect permission handling within the kernel. These issues may affect system stability and security, potentially allowing attackers to cause crashes or escalate privileges if exploited. However, there are no known exploits in the wild at the time of this advisory.

A patch is available from Red Hat addressing all listed vulnerabilities. Users should apply the kernel update provided for Red Hat Enterprise Linux versions 9 and 10 as detailed in the vendor advisory. A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor beyond applying the official update.