This advisory covers six distinct vulnerabilities in the Linux kernel used by Red Hat Enterprise Linux 9.6 EUS. The issues include a use-after-free due to a race condition in SCTP's sendmsg function (CVE-2025-23142), a slab out-of-bounds access in HID multitouch reporting (CVE-2025-39806), multiple use-after-free bugs in Bluetooth management and event handling (CVE-2025-39981 and CVE-2025-39983), a TLS subsystem bug related to asynchronous decryptions (CVE-2025-40176), and a race condition in USB dwc3 driver request removal (CVE-2025-68287). These vulnerabilities could lead to memory corruption or kernel instability if exploited. Red Hat has issued patches for these issues in their kernel packages and requires a system reboot to apply the fixes.

The vulnerabilities affect the core Linux kernel in Red Hat Enterprise Linux 9.6 EUS and could allow attackers to cause use-after-free conditions, out-of-bounds memory access, and race conditions. These issues may result in kernel crashes, memory corruption, or potentially privilege escalation or denial of service. However, no known exploits in the wild have been reported. The overall security impact is rated as Important by Red Hat, indicating a high severity but not critical.

Red Hat has released updated kernel packages that address all listed vulnerabilities. Users of affected Red Hat Enterprise Linux 9.6 EUS versions should apply the kernel update as described in Red Hat advisory RHSA-2026:0457. After applying the update, a system reboot is required for the patches to take effect. There are no indications that further mitigation steps are necessary beyond applying the official update and rebooting.