This Red Hat security advisory (RHSA-2025:14009) addresses five kernel vulnerabilities affecting Red Hat Enterprise Linux 10. The fixes include: a use-after-free in eth_skb_pkt_type() related to BPF test_run (CVE-2025-21867), a fix for UDP GSO skb_segment after pull from frag_list (CVE-2025-38124), a use-after-free in vhci_flush() in Bluetooth hci_core (CVE-2025-38250), an initialization issue in i2c/designware (CVE-2025-38380), and ensuring the TLS queue is refreshed when reading a socket (CVE-2025-38471). These vulnerabilities involve memory safety and initialization flaws (CWE-416, CWE-704, CWE-362, CWE-908). Red Hat rates the update as Important and recommends applying the patch and rebooting affected systems. No CVSS scores are provided in the advisory, and no known exploits in the wild are reported.

The vulnerabilities fixed in this advisory include use-after-free conditions and initialization issues in critical kernel components such as networking (BPF, UDP), Bluetooth, I2C, and TLS socket handling. These flaws could potentially lead to system instability, denial of service, or privilege escalation if exploited. However, no known active exploits have been reported. The overall security impact is rated Important by Red Hat, indicating a significant risk that should be addressed promptly.

Red Hat has released an official security update for the Linux kernel packages in Red Hat Enterprise Linux 10 that addresses these vulnerabilities. Users should apply the update as provided by Red Hat and reboot their systems to ensure the fixes take effect. For detailed instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patch and rebooting.