Red Hat Security Advisory: kernel security update

This Red Hat security advisory covers multiple kernel vulnerabilities affecting Red Hat Enterprise Linux 9.4 EUS and related variants. The fixes address a range of security issues including CVE-2024-42094 (stack allocation issue in net/iucv), CVE-2024-50102 (non-canonical speculation issue on x86), CVE-2025-22097 (use-after-free and double free in drm/vkms), CVE-2025-37914 (double list add in net_sched), CVE-2025-38085 (race condition in huge_pmd_unshare), CVE-2025-38159 (buffer overflow in wifi rtw88), CVE-2025-38250 (use-after-free in Bluetooth hci_core), CVE-2025-38332 (memcpy fix in scsi lpfc), CVE-2025-38352 (race in posix-cpu-timers), and CVE-2025-38464 (use-after-free in tipc). The advisory provides updated kernel packages and requires rebooting the system to apply the fixes.

The vulnerabilities fixed in this advisory could lead to memory corruption issues such as use-after-free, double free, buffer overflows, and race conditions within the kernel. These issues may affect system stability and security, potentially allowing privilege escalation or denial of service. The advisory rates the overall impact as important, indicating significant security risk if unpatched.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the security update for Red Hat Enterprise Linux 9.4 Extended Update Support and related products as soon as possible. A system reboot is required for the update to take effect. Refer to the official Red Hat advisory and article https://access.redhat.com/articles/11258 for detailed update instructions.