This Red Hat security advisory (RHSA-2025:17241) covers multiple kernel vulnerabilities including CVE-2025-37823 (use-after-free in net_sched hfsc_dequeue), CVE-2025-38200 (MMIO write access to invalid page in i40e_clear_hw), CVE-2025-38449 (reference acquisition on GEM handles for framebuffers), CVE-2025-38472 (crash due to removal of uninitialized nf_conntrack entry), CVE-2025-38500 (use-after-free in xfrm interface after changing collect_md), and CVE-2025-38527 (use-after-free in SMB client cifs_oplock_break). The advisory provides updated kernel packages for Red Hat Enterprise Linux 9.4 Extended Update Support and related products. The update requires a system reboot to activate the fixes. No known exploits in the wild have been reported at the time of publication.

These vulnerabilities could lead to system crashes, use-after-free conditions, and invalid memory accesses within the Linux kernel, potentially affecting system stability and security. The advisory rates the impact as moderate. No evidence of active exploitation is reported. The issues affect core kernel components and drivers, which could be leveraged in targeted attacks if exploited.

Red Hat has released updated kernel packages addressing these vulnerabilities. Users of Red Hat Enterprise Linux 9.4 Extended Update Support and related variants should apply the provided kernel updates promptly. A system reboot is required for the updates to take effect. Refer to the official Red Hat advisory RHSA-2025:17241 and the linked article https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigations are specified or required beyond applying the official update.