Skip to content
skopnix
actively exploited · CISA KEV

CVE-2025-39964

NVD HIGH 7.8 · published 2025-10-13

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.

Exploited in the wild

Yes

CISA added it 2026-09-18. An observation, not a forecast.

EPSS · 30-day forecast

0%

Chance of exploitation in the next 30 days, 25th percentile of all CVEs. A forecast; KEV outranks it.

CVSS · NVD

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Internet exposure

No exposure census on this CVE's dispatches.

On the wire0

No dispatch on our wire has named this CVE yet.

References
Early access

Watch this one?

Early access opens alerts first — one email when a CVE you follow lands on KEV or an adversary you follow lands on the wire. Nothing else, ever.

bot-protected