This Red Hat security advisory (RHSA-2026:1690) addresses 19 vulnerabilities in the Linux kernel packages shipped with Red Hat Enterprise Linux 10 and related variants. The issues include multiple use-after-free bugs (e.g., CVE-2025-37819, CVE-2025-40271), out-of-bounds writes (CVE-2025-38568, CVE-2025-40294), race conditions (CVE-2025-40258, CVE-2025-40318), and memory corruption (CVE-2025-40248). Affected kernel components span irqchip/gic-v2m, RDMA core, eventpoll, io_uring, net schedulers, DRM, Bluetooth subsystems, and others. These vulnerabilities can result in privilege escalation, denial of service, information disclosure, or memory corruption. The advisory provides updated kernel packages that fix these issues and requires a system reboot to apply the updates.

The vulnerabilities fixed by this advisory affect the Linux kernel core in Red Hat Enterprise Linux 10 and related products. Exploitation of these issues could allow attackers to cause denial of service, escalate privileges, disclose sensitive information, or corrupt memory. The impact varies by vulnerability but includes critical kernel subsystems such as networking, Bluetooth, and device drivers. No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released updated kernel packages that address all listed vulnerabilities. Users of affected Red Hat Enterprise Linux 10 versions and related products should apply the kernel update as described in the advisory (https://access.redhat.com/articles/11258) and reboot their systems to ensure the fixes take effect. This is the official and recommended remediation. Patch status is confirmed as available via the vendor advisory.