This Red Hat security advisory covers multiple vulnerabilities in the kernel live patch module (kpatch) targeted at kernel-4.18.0-553.16.1.el8_10. The fixes address a use-after-free vulnerability in the net_sched hfsc class when netem is used as a child qdisc (CVE-2025-37890), a reentrant enqueue issue causing duplicate class additions to the eltree (CVE-2025-38001), a queue length accounting bug in hfsc_enqueue() (CVE-2025-38000), a notification omission when a child class becomes empty (CVE-2025-38350), and an initialization problem in the i2c/designware driver (CVE-2025-38380). These patches are distributed as kpatch modules and require rebooting the system for the updates to be applied.

The vulnerabilities include a use-after-free condition and other kernel scheduling and driver bugs that could potentially lead to system instability or unintended behavior in network traffic scheduling and device initialization. The advisory rates the overall security impact as Important (high severity). There are no known exploits in the wild at the time of publication.

Red Hat has released updated kpatch-patch modules for kernel-4.18.0-553.16.1.el8_10 that fix these vulnerabilities. Users should apply the provided security updates and reboot their systems to ensure the patches take effect. Detailed update instructions are available from Red Hat's official advisory. No additional mitigation steps are indicated beyond applying the official patches and rebooting.