Red Hat issued a security advisory (RHSA-2025:16904) for the Linux kernel packages in Red Hat Enterprise Linux 10, addressing six distinct vulnerabilities: CVE-2025-38396 fixes a secretmem LSM bypass by exporting anon_inode_make_secure_inode(); CVE-2025-38527 resolves a use-after-free in the SMB client cifs_oplock_break; CVE-2025-38523 corrects the smbd_response slab to allow usercopy; CVE-2025-39682 fixes TLS handling of zero-length records on the rx_list; CVE-2025-39698 ensures proper cleanup in io_futex_wait on failure; and CVE-2025-39694 corrects the SCCB present check on s390/sclp. The advisory requires applying updated kernel packages and rebooting the system to activate the fixes. No CVSS scores are provided, but Red Hat rates the overall impact as moderate.

The vulnerabilities affect critical kernel components, potentially allowing bypasses of security mechanisms (secretmem LSM), memory corruption (use-after-free), improper memory handling (usercopy), protocol handling errors (TLS zero-length records), improper cleanup in kernel futex operations, and incorrect hardware checks on s390 architecture. Exploitation could lead to system instability or privilege escalation. However, no known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the security update RHSA-2025:16904 for Red Hat Enterprise Linux 10 and reboot the system to ensure the fixes take effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.