EXPOSURES › CVE-2025-39682
CVE-2025-39682
HIGH ⌖ ON CISA KEV · EXPLOITEDA Linux kernel TLS receive path flaw allows zero-length records to bypass record-type handling, risking incorrect zero-copy processing and queuing assumptions.
The Linux kernel vulnerability in the TLS receive path permits zero-length records to bypass intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed with incorrect zero-copy and queuing assumptions. DIB organizations should care because this flaw could lead to data integrity issues or system instability, especially on end-of-life or end-of-service systems. Organizations must transition to supported versions immediately to mitigate this actively exploited vulnerability.
Shame score — The vulnerability is actively exploited in the KEV catalog, indicating a significant failure in patch management and system hardening that could lead to broader system compromise.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.
| PRODUCT | STATUS |
|---|---|
| Mendix Cloud for Government Siemens Government Technologies |
In Process |