The Red Hat security advisory RHSA-2025:15933 provides updated kpatch live patch modules for Red Hat Enterprise Linux 9.0 targeting kernel version 5.14.0-70.112.1.el9_0. It fixes two vulnerabilities: CVE-2025-38052, a slab-use-after-free read in the tipc_aead_encrypt_done function of the net/tipc kernel component, and CVE-2025-38352, a race condition between handle_posix_cpu_timers() and posix_cpu_timer_del() in the posix-cpu-timers kernel component. These vulnerabilities could lead to memory corruption or race condition issues in the kernel. The advisory indicates the update is rated as important and requires a system reboot to apply the fixes.

The use-after-free vulnerability (CVE-2025-38052) in the net/tipc kernel component could lead to memory corruption, potentially causing system instability or allowing an attacker to execute arbitrary code in kernel context. The race condition (CVE-2025-38352) in posix-cpu-timers could lead to unpredictable behavior or denial of service due to improper handling of CPU timer deletion. Both vulnerabilities affect the kernel's stability and security, posing a high risk if exploited.

Red Hat has released updated kpatch live patch modules that fix these vulnerabilities. Systems running the affected kernel version should apply the kpatch updates as provided by Red Hat and reboot the system for the patches to take effect. Refer to Red Hat's official update instructions at https://access.redhat.com/articles/11258. No alternative mitigations are indicated; applying the official patches and rebooting is required.