This Red Hat security advisory (RHSA-2025:11571) addresses five distinct vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9.2. The vulnerabilities include a use-after-free in the ATM networking lec_send() function (CVE-2025-22004), an out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121), improper use of kernel helpers in the ibmvnic driver (CVE-2025-22104), an off-by-one error in ext4 do_split() (CVE-2025-23150), and a buffer size overflow during udmabuf creation (CVE-2025-37803). The advisory provides updated kernel packages that fix these issues and requires a system reboot for the update to take effect. The vulnerabilities are rated with a high severity level by the source, but the vendor classifies the overall update impact as Important. No known exploits in the wild have been reported at the time of the advisory.

The vulnerabilities affect core Linux kernel components, potentially leading to memory corruption issues such as use-after-free, out-of-bound reads, off-by-one errors, and buffer overflows. These could result in system instability, crashes, or privilege escalation if exploited. The advisory does not provide detailed CVSS scores but classifies the overall impact as Important. No known active exploits have been reported.

Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 9.2 and related variants should apply the provided kernel updates as soon as possible. A system reboot is required for the updates to take effect. There is no indication that additional mitigation steps are necessary beyond applying the official patches and rebooting.