Red Hat Product Security issued an advisory (RHSA-2025:19469) for a kernel security update affecting Red Hat Enterprise Linux 10. It addresses two vulnerabilities: CVE-2025-39702, which fixes a constant-time MAC comparison in IPv6 Segment Routing to prevent timing attacks, and CVE-2025-39881, which fixes a use-after-free vulnerability in kernfs polling related to file release. The advisory includes updated kernel packages and requires a reboot to apply the fixes. The update is rated moderate in severity and affects multiple architectures and variants of Red Hat Enterprise Linux 10 and CodeReady Linux Builder 10. No CVSS scores are provided in the advisory; users are directed to CVE pages for detailed scoring.

The vulnerabilities could allow attackers to exploit timing side-channel information leakage (CVE-2025-39702) and use-after-free conditions (CVE-2025-39881) in the Linux kernel, potentially leading to information disclosure or system instability. Red Hat rates the overall impact as moderate. There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated kernel packages that fix these vulnerabilities. Users should apply the security update as detailed in the Red Hat advisory RHSA-2025:19469 and reboot their systems to ensure the fixes take effect. No additional mitigation steps are indicated or required beyond applying the official update and rebooting.