THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-39682 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type

[NVD] CVE-2025-39682 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type

lownvdPublished 2025-09-05

CVE-2025-39682 CVSS: 9.8 CRITICAL Published: 2025-09-05T18:15:44.670

In the Linux kernel, the following vulnerability has been resolved:

tls: fix handling of zero-length records on the rx_list

Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record

If the next record has different type than what has already been processed we break out

Indicators of compromise

CVE-2025-39682cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-39682