Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities
The Cybersecurity and Infrastructure Security Agency has expanded its Known Exploited Vulnerabilities (KEV) catalog with three Linux kernel flaws, urging federal agencies to immediately patch them.
Tracked as CVE-2025-39682 (CVSS score of 9.8), the first of the bugs is a critical-severity issue impacting the kernel’s handling of zero-length records on the rx_list in the TLS receive path.
This is a corner case where the recvmsg() logic – each recvmsg() call processes either DATA or non-DATA records – breaks out of the processing loop when an initial zero-length record is pulled from rx_list.
When zero-copy decryption occurs, the kernel decrypts ciphertext into a user-space buffer. Because zero-copy is permitted only with DATA records, the vulnerable function assumes that no type change can occur after the zero-copy, but the logic can be broken using a zero-length record originating from rx_list.
A local attacker could exploit this improper check for unusual or exceptional...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
