CVE-2025-39682 Linux Linux
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record…
- CVSS
- 9.8 Critical
- EPSS
- 3.3%
- Percentile
- 89
- Published
- 2025-09-05
- Force
- 10 of 12
- Public PoC
- 2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
- Added
- 2026-09-18
- Federal patch deadline
- 2026-09-21
- Ransomware use
- not known