The advisory from Red Hat Product Security details fixes for three kernel vulnerabilities in Red Hat Enterprise Linux 8. CVE-2025-38461 addresses a TOCTOU race condition in the vsock transport layer, which could lead to inconsistent state or unexpected behavior. CVE-2025-38498 fixes an issue in the do_change_type() kernel function that previously allowed operations on mounts that were either unmounted or not owned by the caller, potentially causing security or stability issues. CVE-2025-38556 hardens the HID core function s32ton() against improper conversion to zero bits, preventing potential incorrect processing of input data. The advisory includes updated kernel packages for multiple architectures and product variants, and requires a reboot to apply the fixes. The update is rated as having moderate security impact. No CVSS scores are provided in the advisory, and no known exploits have been reported.

These vulnerabilities affect the Linux kernel, the core component of the operating system, potentially allowing for race conditions, unauthorized mount operations, or improper data conversions that could impact system stability or security. The advisory rates the overall impact as moderate. There are no reports of active exploitation in the wild. Systems running affected versions of Red Hat Enterprise Linux 8 are at risk until updated.

Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the provided kernel updates for their specific Red Hat Enterprise Linux 8 variant and architecture as soon as possible. A system reboot is required for the update to take effect. Refer to Red Hat's official update instructions at https://access.redhat.com/articles/11258. No additional mitigations or workarounds are indicated in the advisory.