Red Hat Product Security issued an advisory (RHSA-2026:0747) for a kernel security update addressing four vulnerabilities: CVE-2025-37869 (drm/xe local fence use in error path), CVE-2025-40141 (Bluetooth ISO possible use-after-free on iso_conn_free), CVE-2025-40176 (TLS waits for pending async decryptions if tls_strp_msg_hold fails), and CVE-2025-68285 (libceph potential use-after-free in have_mon_and_osd_map). These vulnerabilities affect the Linux kernel core in Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder products. The advisory rates the update as important and provides updated kernel packages that fix these issues. The system must be rebooted after applying the update for the fixes to take effect.

The vulnerabilities include use-after-free conditions and improper handling of asynchronous operations in critical kernel components such as DRM, Bluetooth, TLS, and Ceph libraries. These issues could potentially lead to system instability or security breaches if exploited. Red Hat rates the security impact as important, indicating a high severity level but not critical. No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder products should apply the kernel update as provided in advisory RHSA-2026:0747. A system reboot is required after applying the update to ensure the fixes take effect. No additional mitigation steps are indicated by the vendor advisory.