This Red Hat security advisory (RHSA-2025:3215) covers a kernel security update for Red Hat Enterprise Linux 9.4 Extended Update Support. It fixes 11 vulnerabilities identified by CVE identifiers CVE-2024-24857, CVE-2024-26733, CVE-2024-26851, CVE-2024-26940, CVE-2024-35854, CVE-2024-36901, CVE-2024-36920, CVE-2024-36927, CVE-2024-42084, CVE-2024-42265, and CVE-2025-21785. The vulnerabilities include a race condition in Bluetooth connection info age setting, an overflow in ARP request handling, protection against bitmap length out of range in netfilter, conditional creation of debugfs entries, use-after-free in spectrum ACL TCAM, uninitialized value access in IPv4 packet creation, memcpy field-spanning write warning in SCSI, null pointer dereference in IPv6 output, signed offset handling in ftruncate, protection against mispredicted fetches in do_dup2(), and out-of-bounds write in ARM64 cacheinfo array. The advisory provides fixes and requires rebooting the system to apply the update.

The vulnerabilities affect critical kernel components that handle networking protocols, device drivers, and memory management. Exploitation could lead to race conditions, memory corruption, denial of service, or kernel crashes. The advisory rates the overall impact as Important, indicating a high security risk if unpatched. No known exploits in the wild have been reported at the time of the advisory.

Red Hat has released updated kernel packages that address all listed vulnerabilities. Users of Red Hat Enterprise Linux 9.4 Extended Update Support should apply the provided kernel update as detailed in the Red Hat advisory RHSA-2025:3215 and reboot their systems to ensure the fixes take effect. No additional mitigations are specified or required beyond applying the official update.