This Red Hat security advisory (RHSA-2025:18318) provides updates to the Linux kernel packages to address six vulnerabilities: CVE-2025-38351 (KVM: x86/hyper-v PV TLB flush skipping non-canonical addresses), CVE-2025-38571 (sunrpc client TLS alert handling), CVE-2025-38614 (eventpoll semi-unbounded recursion), CVE-2025-38572 (ipv6 rejecting malicious packets in ipv6_gso_segment), CVE-2025-39817 (efivarfs slab-out-of-bounds in efivarfs_d_compare), and CVE-2025-39841 (scsi lpfc buffer free/clear order in deferred receive path). The advisory covers Red Hat Enterprise Linux 10 and various extended update and support versions across multiple architectures. The update requires a system reboot to activate the fixes. No CVSS scores are provided in the advisory; the overall impact is rated moderate by Red Hat Product Security.

The vulnerabilities fixed by this advisory affect core kernel components, potentially impacting system stability, security, and correct operation of virtualization (KVM), networking (IPv6), storage (SCSI lpfc), and other kernel subsystems. The advisory does not report any known exploits in the wild. The impact is rated moderate, indicating these issues could be leveraged to cause denial of service or other limited impact but are not classified as critical or high severity.

Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 10 and related products should apply the provided kernel updates as detailed in the Red Hat advisory RHSA-2025:18318. A system reboot is required for the updates to take effect. There are no indications that additional mitigation steps are necessary beyond applying the official patches and rebooting.