{"cve":{"cve_id":"CVE-2025-39964","is_kev":true,"kev_date_added":"2026-09-18","kev_vendor_project":"Linux","kev_product":"Kernel","kev_vulnerability_name":"Linux Kernel Race Condition Vulnerability","kev_short_description":"Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state.","kev_required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","kev_due_date":"2026-09-21","kev_known_ransomware":false,"kev_notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce; https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9; https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8; https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84; https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d; https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042; https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-39964","kev_cwes":["CWE-362"],"epss_score":0.0131,"epss_percentile":0.70114,"epss_as_of":"2026-10-15","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg\n\nIssuing two writes to the same af_alg socket is bogus as the\ndata will be interleaved in an unpredictable fashion.  Furthermore,\nconcurrent writes may create inconsistencies in the internal\nsocket state.\n\nDisallow this by adding a new ctx->write field that indiciates\nexclusive ownership for writing.","published_at":"2025-10-13T13:48:30.334000Z","last_modified_at":"2026-10-19T21:10:00.160000Z","cvss_v3_score":7.8,"cvss_v3_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_v3_severity":"HIGH","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":false,"ssvc_technical_impact":"partial","cwes":["CWE-362"],"nvd_references":["https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce","https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9","https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8","https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84","https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d","https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042","https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285"],"vuln_status":"Analyzed","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-10-21T18:55:50.580507Z"},"effective_severity":"HIGH","badges":["kev"],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"L","value_label":"Local"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"L","value_label":"Low"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","version_start_inclusive":true,"version_end":"0f28c4adbc4a97437874c9b669fd7958a8c6d6ce","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:8ff590903d5fc7f5a0a988c38267a3d08e6393a2:0f28c4adbc4a97437874c9b669fd7958a8c6d6ce"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","version_start_inclusive":true,"version_end":"e4c1ec11132ec466f7362a95f36a506ce4dc08c9","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:8ff590903d5fc7f5a0a988c38267a3d08e6393a2:e4c1ec11132ec466f7362a95f36a506ce4dc08c9"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","version_start_inclusive":true,"version_end":"1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:8ff590903d5fc7f5a0a988c38267a3d08e6393a2:1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","version_start_inclusive":true,"version_end":"7c4491b5644e3a3708f3dbd7591be0a570135b84","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:8ff590903d5fc7f5a0a988c38267a3d08e6393a2:7c4491b5644e3a3708f3dbd7591be0a570135b84"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","version_start_inclusive":true,"version_end":"9aee87da5572b3a14075f501752e209801160d3d","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:8ff590903d5fc7f5a0a988c38267a3d08e6393a2:9aee87da5572b3a14075f501752e209801160d3d"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","version_start_inclusive":true,"version_end":"45bcf60fe49b37daab1acee57b27211ad1574042","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:8ff590903d5fc7f5a0a988c38267a3d08e6393a2:45bcf60fe49b37daab1acee57b27211ad1574042"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"8ff590903d5fc7f5a0a988c38267a3d08e6393a2","version_start_inclusive":true,"version_end":"1b34cbbf4f011a121ef7b2d7d6e6920a036d5285","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:8ff590903d5fc7f5a0a988c38267a3d08e6393a2:1b34cbbf4f011a121ef7b2d7d6e6920a036d5285"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"2.6.38","version_start_inclusive":true,"version_end":"2.6.38","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:2.6.38:2.6.38"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"0","version_start_inclusive":true,"version_end":"2.6.38","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:0:2.6.38"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"5.10.245","version_start_inclusive":true,"version_end":"5.10.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:5.10.245:5.10.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"5.15.194","version_start_inclusive":true,"version_end":"5.15.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:5.15.194:5.15.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.1.154","version_start_inclusive":true,"version_end":"6.1.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.1.154:6.1.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.6.108","version_start_inclusive":true,"version_end":"6.6.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.6.108:6.6.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.12.49","version_start_inclusive":true,"version_end":"6.12.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.12.49:6.12.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.16.9","version_start_inclusive":true,"version_end":"6.16.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.16.9:6.16.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.17","version_start_inclusive":true,"version_end":"*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.17:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"2.6.38","version_start_inclusive":true,"version_end":"5.10.245","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.17","version_start_inclusive":true,"version_end":"6.17","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.17","version_start_inclusive":true,"version_end":"6.17","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.17","version_start_inclusive":true,"version_end":"6.17","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.17","version_start_inclusive":true,"version_end":"6.17","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.17","version_start_inclusive":true,"version_end":"6.17","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.17:rc5:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.17","version_start_inclusive":true,"version_end":"6.17","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.17:rc6:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"simatic-s7-1500-cpu-1518-4-pn-dp-mfp-firmware","product_name":"simatic_s7-1500_cpu_1518-4_pn/dp_mfp_firmware","version_start":"3.1.6","version_start_inclusive":true,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"simatic-s7-1500-cpu-1518f-4-pn-dp-mfp-firmware","product_name":"simatic_s7-1500_cpu_1518f-4_pn/dp_mfp_firmware","version_start":"3.1.6","version_start_inclusive":true,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp_firmware:*:*:*:*:*:*:*:*"}],"exploit_refs":[],"news":[],"references":[{"url":"https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2025-10-13T13:48:30.334000Z","label":"CVE published","source":null},{"type":"ssvc_changed","at":"2026-06-29T23:46:59.033383Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T23:46:59.033383Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T23:46:59.033383Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-07-14T15:32:50.783054Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-07-14T15:32:50.783054Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-07-14T15:32:50.783054Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-07-30T09:03:23.265941Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-07-30T09:03:23.265941Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-07-30T09:03:23.265941Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cisa_reported","at":"2026-09-18T00:00:00Z","label":"Added to CISA KEV catalog","source":"kev"}]}