CVE-2025-39964 Linux Linux
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore,…
- CVSS
- 7.8 High
- EPSS
- 1.6%
- Percentile
- 76
- Published
- 2025-10-13
- Force
- 9 of 12
- Public PoC
- 2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Linux Kernel Race Condition Vulnerability
- Added
- 2026-09-18
- Federal patch deadline
- 2026-09-21
- Ransomware use
- not known