This Red Hat security advisory (RHSA-2024:6267) addresses 14 kernel vulnerabilities affecting Red Hat Enterprise Linux 9.2 Extended Update Support and associated CodeReady Linux Builder versions. Key fixes include: use of copy_from_kernel_nofault() to safely read from unsafe addresses (CVE-2024-26946), replacement of physindev with physinif in netfilter bridge code (CVE-2024-35839), prevention of lock inversion deadlocks in BPF sockmap (CVE-2024-35895), seeding RNG with RDRAND on CoCo systems (CVE-2024-35875), fixes for multiple use-after-free conditions (e.g., CVE-2024-38570, CVE-2024-39502, CVE-2024-40956), crash fixes, malformed packet rejection, and overflow avoidance in memory management. The advisory provides links to detailed CVE pages for each issue and instructions for applying the update, which requires a reboot.

The vulnerabilities collectively pose a moderate security risk, potentially leading to kernel crashes, denial of service, use-after-free conditions, deadlocks, and improper handling of malformed packets. These issues could affect system stability and security but are not currently known to be exploited in the wild. The update mitigates these risks by patching the kernel code to prevent unsafe memory accesses, deadlocks, and other faults.

Red Hat has released an official security update for the Linux kernel packages in Red Hat Enterprise Linux 9.2 Extended Update Support and related products. Users should apply the update as detailed in the Red Hat advisory RHSA-2024:6267 and reboot the system to ensure the fixes take effect. No additional mitigation steps are required beyond applying the official patch and rebooting.