{"schema":"threatline.record/2","record":{"id":"CVE-2025-39964","aliases":[],"summary":"Linux Kernel Race Condition Vulnerability","details":"Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state.","categories":["Operating systems"],"product":"Kernel","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","source_modified_at":"2026-10-15T01:08:42.257Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"lessThan":"0f28c4adbc4a97437874c9b669fd7958a8c6d6ce","status":"affected","version":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","versionType":"git"},{"lessThan":"e4c1ec11132ec466f7362a95f36a506ce4dc08c9","status":"affected","version":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","versionType":"git"},{"lessThan":"1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8","status":"affected","version":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","versionType":"git"},{"lessThan":"7c4491b5644e3a3708f3dbd7591be0a570135b84","status":"affected","version":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","versionType":"git"},{"lessThan":"9aee87da5572b3a14075f501752e209801160d3d","status":"affected","version":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","versionType":"git"},{"lessThan":"45bcf60fe49b37daab1acee57b27211ad1574042","status":"affected","version":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","versionType":"git"},{"lessThan":"1b34cbbf4f011a121ef7b2d7d6e6920a036d5285","status":"affected","version":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","source_modified_at":"2026-10-15T01:08:42.257Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"status":"affected","version":"2.6.38"},{"lessThan":"2.6.38","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.245","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.194","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.154","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.108","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.49","versionType":"semver"},{"lessThanOrEqual":"6.16.*","status":"unaffected","version":"6.16.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.17","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","source_modified_at":"2026-10-15T01:08:42.257Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"0f28c4adbc4a97437874c9b669fd7958a8c6d6ce","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","source_modified_at":"2026-10-15T01:08:42.257Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","source_modified_at":"2026-10-15T01:08:42.257Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"7c4491b5644e3a3708f3dbd7591be0a570135b84","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","source_modified_at":"2026-10-15T01:08:42.257Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"9aee87da5572b3a14075f501752e209801160d3d","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","source_modified_at":"2026-10-15T01:08:42.257Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"45bcf60fe49b37daab1acee57b27211ad1574042","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","source_modified_at":"2026-10-15T01:08:42.257Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"1b34cbbf4f011a121ef7b2d7d6e6920a036d5285","basis":"first unaffected version stated in the CVE record"}],"cvss":7.8,"severity":"High","kev":{"listed":true,"date_added":"2026-09-18","due_date":"2026-09-21","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","ransomware_campaign_use":"Unknown","forensic_triage":true},"epss":{"probability":0.01362,"percentile":0.71568,"score_date":"2026-10-23"},"published_at":"2025-10-13T13:48:30.334Z","modified_at":"2026-10-15T01:08:42.257Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-15T01:08:42.257Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2025-39964","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39964","source":"CISA KEV"},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39964","tags":["government-resource"]},{"source":"CVE List","url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"},{"source":"CVE List","url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2026-09-18T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-15T01:08:42.257Z","content_hash":"3cdfb52f4959988cc8250d6836efdb2e308780fd75a6dcac1100e010b7fd89e2"}}