Red Hat Product Security issued an advisory for Red Hat Enterprise Linux 10 kernel packages to fix two vulnerabilities: CVE-2026-23231, a use-after-free in nf_tables_addchain() that can result in privilege escalation or denial of service, and CVE-2025-71238, a double free in the qla2xxx Linux kernel driver causing denial of service and possible privilege escalation. The advisory rates the security impact as Moderate and provides updated kernel packages that address these flaws. The update requires a system reboot to take effect. No CVSS scores are provided in the advisory, but the issues are confirmed and fixed in the updated kernel versions.

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or cause denial of service on affected Red Hat Enterprise Linux 10 systems. Both vulnerabilities affect kernel components critical to system security and stability. The use-after-free and double free bugs can lead to memory corruption, which attackers might leverage to gain elevated privileges or disrupt system operations.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 10 that address these vulnerabilities. Users should apply the security update as detailed in the Red Hat advisory RHSA-2026:6053 and reboot affected systems to ensure the fixes take effect. Patch status is confirmed by the vendor advisory, and no additional mitigation steps are indicated.