This Red Hat security advisory (RHSA-2026:6632) covers multiple vulnerabilities in the Linux kernel affecting Red Hat Enterprise Linux 10 and associated products. The vulnerabilities include CVE-2025-38109 (use-after-free in net/mlx5 causing denial of service), CVE-2026-23144 (local denial of service and memory leak in DAMON sysfs), CVE-2026-23171 (use-after-free in bonding module potentially causing system crash or arbitrary code execution), CVE-2026-23193 (use-after-free in iscsi target), CVE-2026-23209 (error recovery fix in macvlan), CVE-2026-23204 (net/sched cls_u32 skb header pointer usage), and CVE-2026-23191 (racy access in ALSA aloop PCM trigger). Red Hat has released updated kernel packages to address these issues, and a system reboot is required to apply the fixes.

The vulnerabilities can cause denial of service conditions, memory leaks, system crashes, and in one case (bonding module use-after-free), potentially arbitrary code execution. These impacts affect the stability and security of systems running the affected kernel versions. No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 10 and related products that address these vulnerabilities. Users should apply the available security update as described in the Red Hat advisory RHSA-2026:6632 and reboot affected systems to ensure the fixes take effect. Patch status is confirmed by the vendor advisory. No additional mitigations are specified beyond applying the official update and rebooting.