Red Hat Product Security released a security advisory (RHSA-2025:15227) for the Linux kernel packages in Red Hat Enterprise Linux 9.2 and related variants. It addresses four vulnerabilities: CVE-2025-38085 fixes a race condition in mm/hugetlb's huge_pmd_unshare() function; CVE-2025-38159 corrects a buffer size issue in the rtw88 wifi driver to prevent out-of-bounds reads; CVE-2025-38250 resolves a use-after-free in Bluetooth's hci_core vhci_flush(); and CVE-2025-38464 fixes a use-after-free in tipc_conn_close(). These vulnerabilities are rated moderate in severity. The advisory provides updated kernel packages and requires a system reboot to apply the fixes.

The vulnerabilities could lead to memory corruption, use-after-free conditions, and out-of-bounds reads within the Linux kernel, potentially affecting system stability and security. The issues impact core kernel components including memory management, wifi driver, Bluetooth stack, and TIPC protocol. Exploitation could result in denial of service or information disclosure. No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 9.2 and related variants should apply the kernel update provided in advisory RHSA-2025:15227. A system reboot is required for the update to take effect. Refer to https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigation is required beyond applying the official update.