This Red Hat security advisory covers a kernel update addressing several vulnerabilities in Red Hat Enterprise Linux 9.4 and 9.6 EUS. Key fixes include CVE-2024-47727 (x86/tdx in-kernel MMIO check), CVE-2024-56603 (dangling socket pointer in net af_can), CVE-2025-22056 (type confusion in netfilter nft_tunnel), CVE-2025-38024 (RDMA/rxe use-after-free leading to potential arbitrary code execution), CVE-2025-38129 (use-after-free in page_pool), CVE-2025-38141 (use-after-free in device mapper due to race condition), and CVE-2025-38703 (dma-fences compliance in drm/xe). Additional fixes in 9.4 include a double free in exFAT filesystem (CVE-2025-38206) and an IPv6 BUG() in pskb_expand_head (CVE-2025-71085). These vulnerabilities affect core kernel components and could lead to system instability or potential code execution if exploited. The advisory provides updated packages and requires rebooting the system after applying the patches.

The vulnerabilities addressed involve memory safety issues such as use-after-free, dangling pointers, type confusion, and race conditions in critical kernel subsystems. These could potentially lead to denial of service or arbitrary code execution within the kernel context. The advisory rates the overall security impact as Moderate. No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 9.4 and 9.6 Extended Update Support that fix these vulnerabilities. Users should apply the provided updates promptly and reboot their systems to ensure the fixes take effect. Detailed update instructions are available in the Red Hat advisory. No additional mitigation steps are indicated beyond applying the official patches and rebooting.