This Red Hat security advisory (RHSA-2025:21469) addresses nine kernel vulnerabilities in Red Hat Enterprise Linux 9. The issues include skipping non-canonical addresses during PV TLB flush in KVM (CVE-2025-38351), refusal to operate on unmounted mounts (CVE-2025-38498), race condition in NFS write updates (CVE-2025-39697), multiple use-after-free bugs in kernfs and Bluetooth components (CVE-2025-39881, CVE-2025-39982, CVE-2025-39983), index validation fix in i40e driver (CVE-2025-39971), and pruning wait queue entries in io_uring (CVE-2025-40047). The advisory provides updated kernel packages that fix these issues. Red Hat rates the overall security impact as moderate and recommends applying the update and rebooting affected systems.

The vulnerabilities affect the Linux kernel core in Red Hat Enterprise Linux 9 and could lead to issues such as improper memory handling (use-after-free), race conditions, and incorrect validation of inputs. These issues may cause system instability or potential escalation of privileges or denial of service, depending on the specific vulnerability. No known exploits in the wild have been reported. The overall impact is rated moderate by Red Hat.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the security update as provided in advisory RHSA-2025:21469 and reboot their systems to ensure the fixes take effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigations are indicated by the vendor advisory.