This Red Hat security advisory (RHSA-2025:11428) addresses multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 10. The fixed issues include: removal of dangling pointers in the uvcvideo media driver (CVE-2024-58002), fixing a double free error in an error path of the uvcvideo driver (CVE-2024-57980), limiting printed strings from firmware files in the iwlwifi wireless driver (CVE-2025-21905), fixing dereferencing of invalid PMD migration entries in huge memory management (CVE-2025-37958), and handling SVC_GARBAGE during sunrpc authentication processing as an authentication error (CVE-2025-38089). The advisory provides updated kernel packages and requires rebooting the system to apply the fixes. No CVSS scores are provided in the advisory, but Red Hat rates the update as Important.

The vulnerabilities affect core components of the Linux kernel, including media drivers, wireless drivers, memory management, and remote procedure call authentication. Exploitation could lead to memory corruption issues such as dangling pointers and double frees, potentially causing system instability or crashes. Improper handling of firmware strings and authentication errors could also impact system reliability or security. The advisory does not report known exploits in the wild.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the provided kernel update for Red Hat Enterprise Linux 10 as described in the advisory (https://access.redhat.com/articles/11258) and reboot the system to ensure the fixes take effect. No additional mitigation steps are indicated by the vendor.