This advisory covers multiple kernel vulnerabilities fixed in Red Hat Enterprise Linux 10. The issues include: CVE-2025-22068 (ublk: ensuring ubq->canceling is set when queue is frozen), CVE-2025-38332 (scsi: lpfc: use memcpy() for BIOS version), CVE-2025-38392 (idpf: converting control queue mutex to a spinlock), CVE-2025-38463 (tcp: correcting signedness in skb remaining space calculation), CVE-2025-38498 (do_change_type(): refusing operations on unmounted or non-owned mounts), CVE-2025-38500 (xfrm: interface: fixing use-after-free after changing collect_md xfrm interface), and CVE-2025-38550 (ipv6: mcast: delaying put pmc->idev in mld_del_delrec()). These fixes address memory safety, synchronization, and logic errors in the kernel. The advisory references additional CVEs and provides links for more detailed information. The update is classified as having a moderate security impact and requires a reboot to apply.

The vulnerabilities fixed in this update affect the Linux kernel core, potentially leading to memory corruption (use-after-free), incorrect memory operations, synchronization issues, and improper mount operations. These issues could impact system stability, security, and reliability. The advisory rates the overall security impact as moderate. There are no known exploits in the wild at the time of this advisory.

A security update for the kernel packages is available from Red Hat for Red Hat Enterprise Linux 10 and its extended support versions. Applying this update and rebooting the system is required to remediate the vulnerabilities. Refer to Red Hat's official advisory (RHSA-2025:15782) and update instructions at https://access.redhat.com/articles/11258 for detailed guidance. No additional mitigation steps are indicated beyond applying the official update and rebooting.