This Red Hat security advisory (RHSA-2025:21463) addresses four distinct vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 10. The vulnerabilities include: CVE-2025-38614, a semi-unbounded recursion issue in the eventpoll subsystem; CVE-2025-39864, a use-after-free vulnerability in the wifi cfg80211 component's cmp_bss() function; CVE-2025-39903, uninitialized memory nodes in the of_numa subsystem that can cause kernel panic; and CVE-2025-39946, a TLS subsystem flaw where streams may not abort properly if headers are malformed. Red Hat has released updated kernel packages that fix these issues and requires a reboot to apply the fixes. The advisory applies to Red Hat Enterprise Linux 10 and its extended update support versions across multiple hardware architectures. No CVSS scores are provided in the advisory, and no exploits are known to be active in the wild.

The vulnerabilities affect the Linux kernel, the core component of the operating system, potentially leading to system instability (kernel panic), memory corruption (use-after-free), and improper handling of network streams. These issues could impact system reliability and security, but no active exploitation has been reported. The severity is rated moderate by Red Hat.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the security update for Red Hat Enterprise Linux 10 as detailed in the advisory (RHSA-2025:21463) and reboot their systems to ensure the fixes take effect. No additional mitigations are indicated or required beyond applying the official update and rebooting.