Red Hat Enterprise Linux 9 kernel packages contain several security vulnerabilities that have been addressed in this advisory. CVE-2024-41009 fixes an issue where the BPF subsystem could overrun reservations in the ring buffer, potentially leading to memory corruption. CVE-2024-42244 resolves a crash on resume in the USB serial mos7840 driver. CVE-2024-50226 mitigates a use-after-free vulnerability in the CXL port driver, allowing out-of-order decoder shutdown. These issues are fixed in updated kernel packages that require a reboot to take effect. No CVSS scores are provided in the advisory, but Red Hat rates the overall impact as moderate.

The vulnerabilities affect the Linux kernel, which is critical to system operation. The BPF ring buffer overrun could lead to memory corruption. The USB serial driver crash could cause system instability on resume. The use-after-free in the CXL port driver could lead to memory corruption or crashes. These issues may affect system reliability and security but are rated moderate in severity by Red Hat. There are no known exploits in the wild at this time.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 9 that address these vulnerabilities. Users should apply the available kernel updates as described in the Red Hat advisory RHSA-2024:10274 and reboot their systems to activate the fixes. The vendor manages remediation through these official patches. Patch status is confirmed as available. No additional mitigations are indicated by the vendor.