This Red Hat security advisory (RHSA-2026:1236) addresses seven distinct vulnerabilities in the Linux kernel, including CVE-2025-21815 (UBSAN shift-out-of-bounds warning in memory compaction), CVE-2025-37789 (nested key length validation in openvswitch), CVE-2025-37761 (out-of-bounds shift in DRM/xe TLB invalidation), CVE-2025-37819 (use-after-free in irqchip/gic-v2m), CVE-2025-37891 (ALSA ump buffer overflow via malformed SysEx message), CVE-2025-40154 (invalid quirk input mapping in Intel bytcr_rt5640), and CVE-2025-40277 (command header size validation in drm/vmwgfx). These vulnerabilities affect Red Hat Enterprise Linux 10.0 Extended Update Support and related builder products across multiple architectures. The advisory provides updated kernel packages to remediate these issues and requires a system reboot to apply the fixes.

The vulnerabilities collectively could lead to memory safety issues such as out-of-bounds accesses, use-after-free, and buffer overflows within the kernel, potentially affecting system stability or security. The advisory rates the overall impact as Moderate. No known exploits in the wild have been reported at the time of publication.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the provided security update for Red Hat Enterprise Linux 10.0 Extended Update Support and related products as detailed in the advisory (https://access.redhat.com/articles/11258). A system reboot is required for the update to take effect. No additional mitigation steps are indicated beyond applying the official update.