This Red Hat security advisory (RHSA-2025:15668) covers a kernel security update for Red Hat Enterprise Linux 9.4 Extended Update Support. It fixes ten vulnerabilities identified by CVE identifiers CVE-2024-42094, CVE-2024-50102, CVE-2025-22097, CVE-2025-37914, CVE-2025-38085, CVE-2025-38159, CVE-2025-38250, CVE-2025-38332, CVE-2025-38352, and CVE-2025-38464. The issues include use-after-free, double free, race conditions, buffer overflows, and speculation side-channel problems affecting kernel components such as net/iucv, x86 architecture code, drm/vkms, net_sched, mm/hugetlb, wifi drivers, Bluetooth hci_core, scsi lpfc, posix-cpu-timers, and tipc. The advisory directs users to apply the update and reboot systems to mitigate these vulnerabilities.

The vulnerabilities fixed in this advisory affect the Linux kernel core components and can lead to memory corruption issues such as use-after-free and double free, race conditions, buffer overflows, and speculation side-channel attacks. These issues could potentially allow attackers to cause system instability, privilege escalation, or information disclosure. The advisory rates the security impact as important (high severity). No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the provided kernel update for Red Hat Enterprise Linux 9.4 Extended Update Support as detailed in the Red Hat advisory RHSA-2025:15668. A system reboot is required for the update to take effect. No additional mitigation steps are indicated beyond applying the official update and rebooting.