The Red Hat security advisory RHSA-2025:10547 reports fixes for three kernel vulnerabilities: CVE-2024-56614 involves an out-of-bounds write in the XSK map when deleting elements; CVE-2024-56615 involves an out-of-bounds write in the BPF devmap when deleting elements; CVE-2025-22126 addresses a use-after-free in the md subsystem during iteration of the all_mddevs list. These vulnerabilities affect the Linux kernel packages in Red Hat Enterprise Linux 9.2 and related products. The advisory provides updated kernel packages that fix these issues. The update requires a system reboot to take effect. Red Hat rates the security impact as moderate. No known exploits in the wild have been reported at the time of the advisory.

Successful exploitation of these vulnerabilities could lead to out-of-bounds memory writes or use-after-free conditions within the kernel, potentially causing system instability or allowing an attacker to execute arbitrary code with kernel privileges. The advisory rates the impact as moderate, indicating a significant but not critical risk. No known active exploitation has been reported.

Red Hat has released updated kernel packages that fix these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.2 versions should apply the kernel update provided in advisory RHSA-2025:10547 and reboot their systems to ensure the fixes take effect. No additional mitigation steps are required beyond applying the official update and rebooting.