This advisory covers seven distinct vulnerabilities in the Linux kernel as packaged by Red Hat Enterprise Linux 10. The issues include: termination of the erratum_1386_microcode array for x86/CPU/AMD (CVE-2024-56721); a double free vulnerability in the crypto algif_hash module (CVE-2025-38079); race conditions related to huge page table unsharing during VMA splits (CVE-2025-38084 and CVE-2025-38085); buffer size miscalculation causing out-of-bounds reads in the rtw88 WiFi driver (CVE-2025-38159); cancellation of outstanding PCI rescan work when unregistering (CVE-2025-38137); and invalid memory access in the ath12k WiFi driver (CVE-2025-38292). The advisory does not provide CVSS scores but classifies the overall impact as moderate. The update is available for Red Hat Enterprise Linux 10 and related variants, and requires a system reboot to apply.

The vulnerabilities affect core kernel components including CPU microcode handling, cryptographic hash processing, memory management for huge pages, and WiFi drivers. Exploitation could lead to memory corruption, race conditions, and out-of-bounds memory access, potentially impacting system stability and security. The advisory rates the overall security impact as moderate. There are no known exploits in the wild at the time of publication.

An official security update for the Linux kernel packages is available from Red Hat for Red Hat Enterprise Linux 10 and related products. Applying this update and rebooting the system is required to remediate the vulnerabilities. Users should follow Red Hat's published instructions at https://access.redhat.com/articles/11258 to apply the update. No additional mitigations are specified or required beyond applying the official patch and rebooting.