This Red Hat security advisory (RHSA-2026:44385) covers eight kernel vulnerabilities affecting Red Hat Enterprise Linux 9.6 Extended Update Support. The issues include CVE-2024-46738 (use-after-free in vmci_resource_remove), CVE-2024-50076 (kernel info leak in con_font_get), CVE-2025-39982 (use-after-free in Bluetooth hci_acl_create_conn_sync), CVE-2026-31488 (incorrect mode change handling in AMD display DSC validation), CVE-2026-31613 (out-of-bounds reads in SMB client symlink error parsing), CVE-2026-31684 (nested VLAN header validation in network scheduler), CVE-2026-46116 (defensive unhashing in xfrm_state deletion), and CVE-2026-46209 (inconsistent plane dimension calculation in DRM GEM framebuffer initialization). The advisory includes bug fixes and enhancements for other kernel components. The update requires a system reboot to take effect. No CVSS scores are provided in the advisory, but the vendor rates the update as important/high severity. No known exploits in the wild have been reported. The advisory applies to Red Hat Enterprise Linux 9.6 Extended Update Support and related variants on multiple architectures.

The vulnerabilities addressed include use-after-free conditions, information leaks, out-of-bounds reads, and validation errors that could potentially lead to system instability, information disclosure, or privilege escalation if exploited. The kernel is a critical component of the operating system, so these issues could impact system security and reliability. The advisory rates the security impact as important/high. No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages that fix these vulnerabilities. Users of Red Hat Enterprise Linux 9.6 Extended Update Support and related variants should apply the update as soon as possible. The system must be rebooted for the update to take effect. For detailed update instructions, refer to Red Hat's official advisory and update documentation at https://access.redhat.com/articles/11258. No additional mitigations are indicated by the vendor advisory.