Red Hat issued a security advisory (RHSA-2025:21118) for the Linux kernel in Red Hat Enterprise Linux 10 and related variants, resolving twelve distinct vulnerabilities (CVE-2025-38498, CVE-2025-39697, CVE-2025-39702, CVE-2025-39718, CVE-2025-39727, CVE-2025-39751, CVE-2025-39757, CVE-2025-39817, CVE-2025-39841, CVE-2025-39849, CVE-2025-39881, CVE-2025-40300). These include fixes for race conditions, buffer overflows, slab out-of-bounds, use-after-free, and validation errors in kernel components such as mount operations, NFS, virtual socket communication, IPv6 segment routing, memory management swap clusters, USB audio descriptors, and others. The advisory does not provide CVSS scores but classifies the impact as moderate. The update requires rebooting the system to take effect.

The vulnerabilities affect core Linux kernel functionality and could potentially lead to system instability, memory corruption, or information leaks if exploited. The advisory rates the overall security impact as moderate. There are no known exploits in the wild at the time of the advisory. The issues span multiple kernel subsystems, indicating a broad attack surface within the kernel.

Red Hat has released an official security update that addresses all listed vulnerabilities. Users of Red Hat Enterprise Linux 10 and related products should apply the kernel update as provided by Red Hat Product Security. A system reboot is required for the update to take effect. No additional mitigations are indicated or required beyond applying the official patch.