Red Hat Product Security issued an advisory (RHSA-2025:11455) for a kernel security update affecting Red Hat Enterprise Linux 8. It fixes two vulnerabilities: CVE-2024-50154, which corrects the use of timer_pending() in reqsk_queue_unlink() within the tcp/dccp kernel code, and CVE-2025-38086, which resolves uninitialized memory access during mii_nway_restart in the ch9200 network driver. The advisory rates the impact as moderate and provides updated kernel packages for multiple architectures including x86_64, s390x, ppc64le, and aarch64. The update requires a system reboot to apply the fixes.

The vulnerabilities affect the Linux kernel core components, potentially leading to issues such as use-after-free (CWE-416) and uninitialized memory access (CWE-908). The advisory classifies the security impact as moderate. No known exploits in the wild have been reported. The issues could affect system stability or security if exploited, but no detailed impact scenarios are provided.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the kernel update as described in the Red Hat advisory and reboot their systems to activate the fixes. The advisory provides detailed instructions and package links. No alternative mitigations are indicated.