This Red Hat security advisory covers multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9.2 and 10. Key fixes include a use-after-free in proc_get_inode() (CVE-2025-21999), a double free vulnerability in the qla2xxx driver leading to denial of service and potential privilege escalation (CVE-2025-71238), denial of service and memory corruption in RDMA umad (CVE-2026-23243), privilege escalation or denial of service in KVM due to improper shadow page table handling (CVE-2026-23401), use-after-free in CAN raw socket handling (CVE-2026-31532), a local privilege escalation variant of the Dirty Frag vulnerability in ESP/XFRM (CVE-2026-46300), and an issue allowing unprivileged users to read root-owned files (CVE-2026-46333). Red Hat has released updated kernel packages addressing these issues, requiring system reboot for the updates to apply.

The vulnerabilities collectively can lead to denial of service, memory corruption, local privilege escalation, and unauthorized access to root-owned files. Exploitation could allow attackers to disrupt system stability or escalate privileges locally. No known exploits in the wild have been reported at this time. The severity ranges from moderate to important as rated by Red Hat Product Security.

Red Hat has released updated kernel packages for affected versions of Red Hat Enterprise Linux 9.2 and 10 that address these vulnerabilities. Users should apply the provided security updates promptly and reboot their systems to ensure the fixes take effect. Refer to Red Hat's official advisory and update instructions at https://access.redhat.com/articles/11258 for detailed remediation steps.