The Red Hat kernel live patch module for kernel-5.14.0-284.79.1.el9_2 addresses two vulnerabilities: CVE-2025-38052, a slab-use-after-free read in the tipc_aead_encrypt_done function within the net/tipc subsystem, and CVE-2025-38352, a race condition between handle_posix_cpu_timers() and posix_cpu_timer_del() in the posix-cpu-timers subsystem. These vulnerabilities could lead to use-after-free memory access and race conditions, potentially causing system instability or security issues. The patch is delivered as a kpatch live update module, which modifies the running kernel code. The update requires a system reboot to fully apply the fixes. The advisory rates the impact as Important (high severity).

The vulnerabilities involve a use-after-free memory access and a race condition in kernel components, which could lead to system instability or potential security risks such as memory corruption. No known exploits in the wild have been reported. The issues affect the kernel live patch module targeted for kernel-5.14.0-284.79.1.el9_2 on Red Hat Enterprise Linux 9.2. The impact severity is rated as high by the vendor.

Red Hat has released updated kpatch live patch modules (kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_79_1, and kpatch-patch-5_14_0-284_92_1) that address these vulnerabilities. Users should apply these updates following Red Hat's guidance at https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. No additional mitigation steps are indicated by the vendor.