EXPOSURES › CVE-2025-39964
CVE-2025-39964
HIGH ⌖ ON CISA KEV · EXPLOITEDA Linux kernel race condition in AF_ALG sockets causes data interleaving and state inconsistencies, listed in CISA KEV.
This vulnerability allows concurrent writes to AF_ALG sockets to interleave data and corrupt internal socket state, which can lead to unpredictable system behavior or denial of service. DIB organizations must patch this immediately as it is actively exploited in the wild, and should audit their Linux kernel versions for this CVE-2025-39964.
Shame score — The vulnerability is in the Linux kernel, a foundational component, and is already in CISA KEV, indicating active exploitation despite being a known race condition.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state.