Red Hat has issued a security advisory (RHSA-2025:19962) for Red Hat Enterprise Linux 10 addressing two vulnerabilities: CVE-2024-28956 affecting microcode_ctl, and CVE-2025-39864, a use-after-free flaw in the kernel's wifi cfg80211 component (cmp_bss function). These vulnerabilities impact the Linux kernel, the core of the operating system. The advisory rates the security impact as moderate and provides updated kernel packages to remediate these issues. The update requires a system reboot to apply the fixes. The advisory covers multiple Red Hat Enterprise Linux 10 variants across x86_64, IBM z Systems, Power (ppc64le), and ARM 64 architectures.

The vulnerabilities affect the Linux kernel, potentially allowing issues related to microcode handling and a use-after-free condition in the wifi subsystem. The moderate severity rating indicates these issues could lead to system instability or limited security impact but are not classified as critical. No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the available kernel updates for Red Hat Enterprise Linux 10 as detailed in the advisory and reboot their systems to ensure the fixes take effect. Patch status is confirmed by the vendor advisory. There are no indications that additional mitigations beyond applying the update and rebooting are required.