This Red Hat security advisory (RHSA-2025:17377) addresses three kernel vulnerabilities in Red Hat Enterprise Linux 9. CVE-2024-50301 fixes a slab-out-of-bounds vulnerability in the kernel's security keys subsystem (key_task_permission). CVE-2025-38351 mitigates an issue in the KVM x86 hypervisor code related to skipping non-canonical addresses during paravirtualized TLB flushes on Hyper-V. CVE-2025-39761 resolves a problem in the ath12k wifi driver where the TID decrement on RX peer fragment setup error was mishandled. The update requires rebooting the system to take effect. The advisory rates the impact as moderate and applies to various Red Hat Enterprise Linux 9 variants across multiple CPU architectures including x86_64, s390x, ppc64le, and aarch64. No CVSS scores are provided in the advisory, and no known exploits have been reported. The vendor provides updated kernel packages to remediate these issues.

The vulnerabilities affect the Linux kernel, which is critical to system operation. The slab-out-of-bounds bug could lead to memory corruption in the kernel's key management subsystem. The KVM vulnerability could affect virtual machine isolation or stability on Hyper-V hosts. The wifi driver issue could cause improper error handling in wireless communications. While no known exploits are reported, these flaws could potentially be leveraged to cause denial of service or privilege escalation under certain conditions. The overall security impact is rated moderate by Red Hat.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 9 that address these vulnerabilities. Users should apply the available kernel update as soon as possible and reboot the system to ensure the fixes take effect. Detailed update instructions are available in the Red Hat advisory. No additional mitigations are specified or required beyond applying the official update and rebooting.