Red Hat issued a security advisory (RHSA-2026:4011) for multiple Linux kernel vulnerabilities affecting Red Hat Enterprise Linux 9.6 Extended Update Support and related products. The fixed issues include CVE-2024-47727 (x86/tdx in-kernel MMIO check), CVE-2024-56603 (dangling socket pointer in af_can), CVE-2025-22056 (type confusion in netfilter nft_tunnel), CVE-2025-38024 (use-after-free in RDMA/rxe potentially leading to arbitrary code execution), CVE-2025-38129 (use-after-free in page_pool), CVE-2025-38141 (use-after-free in device mapper due to race condition), and CVE-2025-38703 (dma-fence compliance in drm/xe). The advisory provides updated kernel packages and requires a system reboot to apply the fixes. No known exploits in the wild have been reported.

The vulnerabilities include use-after-free and double free bugs that can lead to arbitrary code execution or denial of service conditions. Specifically, CVE-2025-38024 may allow arbitrary code execution via RDMA/rxe, while CVE-2025-38206 can cause denial of service through a double free in the exFAT filesystem. Other flaws may cause system instability or crashes. The overall security impact is rated moderate by Red Hat.

Red Hat has released updated kernel packages that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.6 Extended Update Support and related products should apply the kernel update provided in advisory RHSA-2026:4011. A system reboot is required for the update to take effect. Refer to Red Hat's official update instructions at https://access.redhat.com/articles/11258 for detailed remediation steps.