Red Hat issued a security advisory (RHSA-2025:15011) for Red Hat Enterprise Linux 9 kernel packages addressing multiple vulnerabilities including CVE-2025-37823 (use-after-free in net_sched hfsc_dequeue), CVE-2025-38200 (invalid MMIO write in i40e_clear_hw), CVE-2025-38211 (use-after-free in RDMA/iwcm work objects), CVE-2025-38350 (notification handling in net/sched), CVE-2025-38464 (use-after-free in tipc_conn_close), CVE-2025-38461 (TOCTOU in vsock transport), and CVE-2025-38500 (use-after-free in xfrm interface). These vulnerabilities impact critical kernel subsystems and could lead to memory corruption or race conditions. The advisory provides updated kernel packages and requires rebooting the system for the fixes to be applied.

The vulnerabilities involve use-after-free conditions, invalid memory writes, and race conditions in kernel components, which could lead to system instability, crashes, or potential escalation of privileges if exploited. The advisory rates the overall impact as Important (high severity). No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages that fix these vulnerabilities. Users should apply the security update for Red Hat Enterprise Linux 9 as detailed in the advisory (https://access.redhat.com/articles/11258) and reboot the system to activate the fixes. No additional mitigations are specified or required beyond applying the official update and rebooting.