The security advisory from Red Hat Product Security details fixes for two kernel vulnerabilities in Red Hat Enterprise Linux 8.8's live patch modules targeting kernel-4.18.0-477.67.1.el8_8. CVE-2025-38052 is a slab-use-after-free read vulnerability in the net/tipc component's tipc_aead_encrypt_done function, which could lead to use-after-free memory errors. CVE-2025-38352 is a race condition in the posix-cpu-timers subsystem between the functions handle_posix_cpu_timers() and posix_cpu_timer_del(), potentially causing inconsistent timer handling. These vulnerabilities are addressed by updated kpatch-patch packages listed in the advisory. The advisory recommends applying these updates and rebooting the system to ensure the fixes take effect.

The vulnerabilities could lead to kernel memory corruption (use-after-free) and race conditions affecting timer handling, which may impact system stability or security. The advisory rates the security impact as Important (high severity). No known exploits in the wild have been reported. The issues affect the kernel live patch module for kernel-4.18.0-477.67.1.el8_8 on Red Hat Enterprise Linux 8.8.

Red Hat has released updated kpatch-patch packages that fix these vulnerabilities. Users should apply the provided security updates for Red Hat Enterprise Linux 8.8 as described in the Red Hat advisory RHSA-2025:16008. A system reboot is required for the updates to take effect. There is no indication that additional mitigations are necessary beyond applying the official patches and rebooting.