Red Hat issued a security advisory (RHSA-2025:7683) for kernel updates in Red Hat Enterprise Linux 9.2 Extended Update Support to address two vulnerabilities: CVE-2024-47745 fixes the omission of calling the security_mmap_file() Linux Security Module hook in remap_file_pages(), and CVE-2025-21756 fixes improper handling of vsock socket binding persistence until socket destruction. These fixes are included in updated kernel packages that must be installed and followed by a system reboot. The advisory rates the security impact as Moderate and does not provide CVSS scores. The update affects multiple architectures including x86_64, s390x, ppc64le, and aarch64.

The vulnerabilities affect the Linux kernel's memory management and vsock subsystems, potentially impacting system security by bypassing security hooks or improper socket binding lifecycle management. The advisory classifies the impact as Moderate. No known exploits in the wild have been reported. The issues could allow unauthorized actions related to memory mapping and socket handling if left unpatched.

Red Hat has released an official security update for Red Hat Enterprise Linux 9.2 Extended Update Support that addresses these vulnerabilities. Users should apply the kernel update provided in advisory RHSA-2025:7683 and reboot their systems to ensure the fixes take effect. Refer to https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigation steps are indicated by the vendor.