This advisory covers six kernel vulnerabilities in Red Hat Enterprise Linux 9, including CVE-2025-21920 which enforces underlying device type in VLAN, CVE-2025-21926 fixing ownership in UDP GSO segmentation, CVE-2025-21997 addressing an integer overflow in XSK umem assignment, CVE-2025-22055 fixing an integer overflow in geneve_opt length, CVE-2025-37785 correcting an out-of-bounds read in ext4 directory checks, and CVE-2025-37943 resolving invalid data access in the ath12k WiFi driver. These vulnerabilities impact critical kernel subsystems and have been rated with high severity by Red Hat Product Security. The advisory provides updated kernel packages and requires rebooting the system to apply the fixes.

The vulnerabilities affect core Linux kernel functionality, potentially allowing attackers to cause memory corruption, data access violations, or bypass device type checks. This could lead to system instability, denial of service, or privilege escalation depending on the specific flaw. The advisory classifies the security impact as important (high severity), indicating significant risk if unpatched. No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the provided kernel updates for Red Hat Enterprise Linux 9 as detailed in the advisory (https://access.redhat.com/articles/11258). A system reboot is required to activate the patched kernel. No additional mitigations are indicated beyond applying the official update.