The advisory covers a set of security fixes for the Linux kernel in Red Hat Enterprise Linux 10, including CVE-2024-56603 which addresses a dangling socket pointer in the af_can network code, CVE-2024-56645 fixing skb reference counting in the j1939 CAN protocol implementation, and CVE-2026-46243 which rejects userspace cifs.spnego descriptions in the SMB client. Additional vulnerabilities fixed include use-after-free, heap overflow, privilege escalation, and denial of service issues across various kernel subsystems such as traffic control, KVM, NFS, Bluetooth SCO, USBIP, RDMA, and ESP/XFRM. The advisory references 13 CVEs in total and provides updated kernel packages for multiple architectures and variants of Red Hat Enterprise Linux 10. The update is classified as Important and requires rebooting the system to apply.

The vulnerabilities fixed by this advisory could allow local attackers to cause denial of service, escalate privileges, or improperly access sensitive files on affected systems running vulnerable versions of the Linux kernel in Red Hat Enterprise Linux 10. The issues include memory corruption (use-after-free, dangling pointers), reference counting errors, heap overflows, and improper validation of inputs. Exploitation could lead to system instability, privilege escalation to root, or unauthorized data access.

Red Hat has released updated kernel packages addressing these vulnerabilities. Users of Red Hat Enterprise Linux 10 and related products should apply the kernel update provided in advisory RHSA-2026:19569 as soon as possible. A system reboot is required for the update to take effect. No additional mitigations are specified beyond applying the official update.