The advisory covers nine distinct kernel vulnerabilities identified by CVE identifiers CVE-2025-68366, CVE-2026-23270, CVE-2026-23392, CVE-2026-31607, CVE-2026-31685, CVE-2026-31709, CVE-2026-43037, CVE-2026-43038, and CVE-2026-43110. These include a deferred config unlock in nbd_genl_connect, use-after-free in traffic control potentially causing denial of service or privilege escalation, flowtable release timing issues in netfilter, validation errors in USB IP packet submission, rejection of invalid MAC headers in netfilter, clearing of skb control buffers in IPv6 tunnels and ICMP handling, validation of DACLs in SMB client, and validation of BSS configuration indices in WiFi drivers. The advisory is rated as having an important security impact by Red Hat and applies to Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder and BaseOS components. The update requires a system reboot to apply.

The vulnerabilities collectively may allow an attacker to cause denial of service or escalate privileges on affected systems running the vulnerable kernel versions. The issues affect core kernel components responsible for networking, USB, SMB, and WiFi functionality, potentially impacting system stability and security. No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released an official security update that addresses all listed vulnerabilities. Users of Red Hat Enterprise Linux 10.0 Extended Update Support and related components should apply the kernel update as provided by Red Hat Product Security. A system reboot is required for the update to take effect. Refer to the Red Hat advisory RHSA-2026:24343 and the linked article https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigation steps are indicated beyond applying the update.