This Red Hat security advisory addresses numerous vulnerabilities in the Linux kernel and kernel-rt packages for Red Hat Enterprise Linux versions 9.2 and 9.4. The vulnerabilities include CVE-2025-40135, CVE-2025-40158, CVE-2025-40170, CVE-2025-68724, CVE-2025-71089, CVE-2026-23216, CVE-2026-23392, CVE-2026-31685, CVE-2026-43037, CVE-2026-43038, CVE-2026-46243, and others. These issues involve improper use of Read-Copy-Update (RCU) mechanisms, use-after-free bugs, overflow conditions, and validation errors in kernel networking, cryptographic key generation, IOMMU configuration, SCSI target handling, netfilter flowtable management, IPv6 packet processing, SMB client access control, and wireless driver event handling. The advisory provides updated kernel packages that fix these vulnerabilities, requiring a reboot to apply the changes.

The vulnerabilities collectively pose a high security impact as rated by Red Hat. They could potentially allow attackers to cause system instability, denial of service, or unauthorized access to kernel-level operations. Specific impacts include use-after-free leading to memory corruption, overflow conditions in cryptographic key generation, improper packet handling in IPv6 and netfilter subsystems, and validation bypasses in SMB client access control. However, there are no known exploits in the wild reported at this time.

Red Hat has released updated kernel and kernel-rt packages for affected Red Hat Enterprise Linux versions 9.2 and 9.4 that address these vulnerabilities. Users should apply these official updates promptly and reboot their systems to ensure the fixes take effect. For detailed update instructions, refer to Red Hat's official advisory and knowledge base article at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the vendor-provided patches and rebooting.