Red Hat Product Security issued a security advisory (RHSA-2025:17122) for Red Hat Enterprise Linux 9.2 addressing six kernel vulnerabilities: CVE-2025-37810 (usb: dwc3 gadget event count buffer overflow), CVE-2025-38200 (i40e driver invalid MMIO write), CVE-2025-38461 (vsock transport TOCTOU race condition), CVE-2025-38449 (drm/gem framebuffer reference handling), CVE-2025-38472 (netfilter nf_conntrack crash from uninitialized entry removal), and CVE-2025-38527 (SMB client use-after-free). These vulnerabilities impact core kernel components and could lead to crashes, memory corruption, or other stability issues. The advisory rates the overall impact as moderate. The update is available for Red Hat Enterprise Linux 9.2 variants including x86_64, ppc64le, aarch64, and s390x architectures. Applying the update requires a system reboot.

The vulnerabilities fixed in this advisory affect critical kernel components and can lead to memory corruption, crashes, use-after-free conditions, and race conditions. These issues may impact system stability and security by potentially allowing improper memory access or denial of service. The advisory does not report known exploits in the wild. The overall severity is rated moderate by Red Hat.

Red Hat has released an official security update for Red Hat Enterprise Linux 9.2 that addresses all listed vulnerabilities. Users should apply the update as described in the Red Hat advisory (RHSA-2025:17122) and reboot their systems to ensure the fixes take effect. No additional mitigation steps are indicated beyond applying the official patches and rebooting.