This Red Hat security advisory (RHSA-2025:3215) addresses 11 vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9.4 Extended Update Support. The fixed issues include a race condition in Bluetooth connection info age setters (CVE-2024-24857), an overflow in ARP request handling (CVE-2024-26733), protection against bitmap length out of range in netfilter H323 connection tracking (CVE-2024-26851), conditional creation of debugfs entries in DRM vmwgfx (CVE-2024-26940), a use-after-free during rehash in mlxsw spectrum ACL TCAM (CVE-2024-35854), uninitialized value access in IPv4 skb creation (CVE-2024-36927), memcpy field-spanning write warning in SCSI mpi3mr (CVE-2024-36920), null pointer dereference prevention in IPv6 output (CVE-2024-36901), signed offset passing in ftruncate (CVE-2024-42084), protection against mispredictions in do_dup2 fd fetch (CVE-2024-42265), and out-of-bounds write avoidance in ARM64 cacheinfo array (CVE-2025-21785). These fixes improve kernel stability and security by addressing memory corruption, race conditions, and input validation issues.

The vulnerabilities fixed in this advisory affect core kernel components and could potentially lead to system instability, memory corruption, or denial of service if exploited. The issues include race conditions, buffer overflows, use-after-free, null pointer dereferences, and uninitialized memory access, which can undermine kernel integrity and security. However, there are no known exploits in the wild at the time of this advisory. The overall security impact is rated as Important by Red Hat.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 9.4 Extended Update Support that address these vulnerabilities. Users should apply the provided kernel update promptly and reboot their systems to ensure the fixes take effect. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update and rebooting.