This Red Hat security advisory (RHSA-2025:19106) addresses six vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 10. The fixed issues include a race condition when updating an existing NFS write (CVE-2025-39697), validation of packet header length in vsock/virtio before skb_put() (CVE-2025-39718), filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730), a potential buffer overflow in mm swap setup_clusters() (CVE-2025-39727), a buffer overflow in ALSA hda/ca0132 add_tuning_control (CVE-2025-39751), and capping SSID length in wifi cfg80211 sme connect result (CVE-2025-39849). These vulnerabilities could lead to kernel memory corruption or race conditions. The advisory provides updated kernel packages and requires rebooting the system for the fixes to apply.

The vulnerabilities fixed in this advisory could allow local or potentially remote attackers to cause race conditions or buffer overflows within the kernel, leading to possible denial of service or privilege escalation. The issues affect core kernel components including NFS, virtual socket communication, memory management, audio drivers, and wifi configuration. Exploitation could compromise system stability or security. No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 10 that address these vulnerabilities. Users should apply the available kernel update as described in the Red Hat advisory and reboot their systems to ensure the fixes take effect. Patch status is confirmed as official-fix by Red Hat Product Security.