The advisory covers three vulnerabilities in the Linux kernel shipped with Red Hat Enterprise Linux 10. CVE-2025-21919 is a potential memory corruption issue in the scheduler's fair queuing function child_cfs_rq_on_list. CVE-2025-21964 is an integer overflow vulnerability in the CIFS filesystem code when processing the acregmax mount option. CVE-2025-37785 is an out-of-bounds read vulnerability in the ext4 filesystem when checking the dotdot directory entry. Red Hat has released updated kernel packages that address these issues. The update requires a system reboot to take effect. No known exploits in the wild have been reported. The advisory rates the update as having a moderate security impact.

Successful exploitation of these vulnerabilities could lead to memory corruption or out-of-bounds memory reads within the kernel, potentially causing system instability or enabling privilege escalation. However, the advisory does not report any active exploitation in the wild. The issues affect core kernel components related to scheduling and filesystem handling, which are critical to system operation.

Red Hat has released an official security update for the Linux kernel packages in Red Hat Enterprise Linux 10 that fixes these vulnerabilities. Users should apply the kernel update as provided by Red Hat and reboot their systems to ensure the fixes take effect. No additional mitigation steps are indicated in the advisory.