Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2025-39682: Linux kernel may mishandle TLS traffic
CVE-2025-39682 · published 2 days ago · actively exploited
Summary
The Linux kernel's handling of encrypted network data can mistakenly treat an empty packet as valid, leading to incorrect processing of later packets. This could cause instability or crashes on affected systems, especially older or unsupported versions. Update to a supported kernel release or stop using the outdated kernels.
What to do
- Update debian rootio-linux to version 6.12.63-1.root.io.64.
- Update debian rootio-linux to version 6.12.74-2.root.io.98.
- Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
- Update linux kernel to version 6.16.4.
- Update canonical linux-aws-6.8 to version 6.8.0-1041.43~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1041.47~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1042.45~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-86.87~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1039.39~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-86.87.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1041.44~22.04.2.
- Update canonical linux-oracle-6.8 to version 6.8.0-1038.39~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-86.87~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1036.37~22.04.1.
- Update canonical linux to version 6.8.0-86.87.
- Update canonical linux-aws to version 6.8.0-1041.43.
- Update canonical linux-aws-6.14 to version 6.14.0-1015.15~24.04.1.
- Update canonical linux-azure to version 6.8.0-1041.47.
- Update canonical linux-azure-6.14 to version 6.14.0-1014.14~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1029.32.
- Update canonical linux-azure-nvidia-6.14 to version 6.14.0-1007.7.
- Update canonical linux-gcp to version 6.8.0-1042.45.
- Update canonical linux-gcp-6.14 to version 6.14.0-1018.19~24.04.1.
- Update canonical linux-gke to version 6.8.0-1038.43.
- Update canonical linux-gkeop to version 6.8.0-1025.28.
- Update canonical linux-ibm to version 6.8.0-1039.39.
- Update canonical linux-lowlatency to version 6.8.0-86.87.1.
- Update canonical linux-nvidia to version 6.8.0-1041.44.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1041.44.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1012.12.
- Update canonical linux-oem-6.14 to version 6.14.0-1014.14.
- Update canonical linux-oracle to version 6.8.0-1038.39.
- Update canonical linux-oracle-6.14 to version 6.14.0-1015.15~24.04.1.
- Update canonical linux-raspi to version 6.8.0-1041.45.
- Update canonical linux-riscv-6.14 to version 6.14.0-34.34.1~24.04.1.
- Update canonical linux-xilinx to version 6.8.0-1018.19.
- Update canonical linux-aws-fips to version 6.8.0-1041.43+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1044.50+fips1.
- Update canonical linux-fips to version 6.8.0-86.87+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1042.45+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2032.33.
- Update canonical linux-realtime to version 6.8.1-1036.37.
- Update canonical linux-realtime-6.14 to version 6.14.0-1014.14~24.04.1.
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update google :linux_kernel: to version :2026-03-05.
- Update debian linux to version 6.1.153-1.
- Update debian linux to version 6.12.48-1.
- Update debian linux to version 6.16.5-1.
- Update canonical linux-bluefield to version 6.8.0-1012.16.
- Update bellsoft linux-lts to version 6.1.151-r0.
- Update bellsoft linux-lts to version 6.12.44-r0.
- Update bellsoft linux-lts to version 6.18.35-r1.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux linux to version 2902c3ebcca52ca845c03182000e8d71d3a5196f or later.
- Update siemens simatic_cn_4100_firmware to version 5.0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.63-1.root.io.64 < 6.12.74-2.root.io.98 Fix: upgrade to 6.12.63-1.root.io.64
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-134.134.root.io.80 < 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-134.134.root.io.80
|
| Linux | linux | kernel |
>= 6.13.0, < 6.16.4 Fix: upgrade to 6.16.4
|
| – | linux | kernel | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
Showing 50 of 153. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1041.43~22.04.1 Fix: upgrade to 6.8.0-1041.43~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1041.47~22.04.1 Fix: upgrade to 6.8.0-1041.47~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1042.45~22.04.1 Fix: upgrade to 6.8.0-1042.45~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-86.87~22.04.1 Fix: upgrade to 6.8.0-86.87~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1039.39~22.04.1 Fix: upgrade to 6.8.0-1039.39~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-86.87.1~22.04.1 Fix: upgrade to 6.8.0-86.87.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1041.44~22.04.2 Fix: upgrade to 6.8.0-1041.44~22.04.2
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1038.39~22.04.1 Fix: upgrade to 6.8.0-1038.39~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-86.87~22.04.1 Fix: upgrade to 6.8.0-86.87~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1036.37~22.04.1 Fix: upgrade to 6.8.1-1036.37~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-86.87 Fix: upgrade to 6.8.0-86.87
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1041.43 Fix: upgrade to 6.8.0-1041.43
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 |
< 6.14.0-1015.15~24.04.1 Fix: upgrade to 6.14.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1041.47 Fix: upgrade to 6.8.0-1041.47
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 |
< 6.14.0-1014.14~24.04.1 Fix: upgrade to 6.14.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1029.32 Fix: upgrade to 6.8.0-1029.32
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 |
< 6.14.0-1007.7 Fix: upgrade to 6.14.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1042.45 Fix: upgrade to 6.8.0-1042.45
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 |
< 6.14.0-1018.19~24.04.1 Fix: upgrade to 6.14.0-1018.19~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1038.43 Fix: upgrade to 6.8.0-1038.43
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1025.28 Fix: upgrade to 6.8.0-1025.28
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1039.39 Fix: upgrade to 6.8.0-1039.39
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-86.87.1 Fix: upgrade to 6.8.0-86.87.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1041.44 Fix: upgrade to 6.8.0-1041.44
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1041.44.1 Fix: upgrade to 6.8.0-1041.44.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1012.12 Fix: upgrade to 6.8.0-1012.12
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 |
< 6.14.0-1014.14 Fix: upgrade to 6.14.0-1014.14
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1038.39 Fix: upgrade to 6.8.0-1038.39
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 |
< 6.14.0-1015.15~24.04.1 Fix: upgrade to 6.14.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1041.45 Fix: upgrade to 6.8.0-1041.45
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 |
< 6.14.0-34.34.1~24.04.1 Fix: upgrade to 6.14.0-34.34.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1018.19 Fix: upgrade to 6.8.0-1018.19
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1012.16 Fix: upgrade to 6.8.0-1012.16
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1041.43+fips1 Fix: upgrade to 6.8.0-1041.43+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1044.50+fips1 Fix: upgrade to 6.8.0-1044.50+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-86.87+fips1 Fix: upgrade to 6.8.0-86.87+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1042.45+fips1 Fix: upgrade to 6.8.0-1042.45+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2032.33 Fix: upgrade to 6.8.0-2032.33
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1036.37 Fix: upgrade to 6.8.1-1036.37
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 |
< 6.14.0-1014.14~24.04.1 Fix: upgrade to 6.14.0-1014.14~24.04.1
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:26.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| – | linux | linux_kernel |
>= 6.0, < 6.1.149 >= 6.2, < 6.6.103 >= 6.7, < 6.12.44 >= 6.13, < 6.16.4 6.17 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | debian | debian_linux |
11.0 cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| – | linux | linux |
< 2902c3ebcca52ca845c03182000e8d71d3a5196f 6.0 |
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 Fix: upgrade to 6.1.159-1.root.io.75
|
| Android | :linux_kernel: |
>= :0, < :2026-03-05 Fix: upgrade to :2026-03-05
|
|
| Debian:12 | debian | linux |
< 6.1.153-1 Fix: upgrade to 6.1.153-1
|
| Debian:13 | debian | linux |
< 6.12.48-1 Fix: upgrade to 6.12.48-1
|
| Debian:14 | debian | linux |
< 6.16.5-1 Fix: upgrade to 6.16.5-1
|
| – | siemens | simatic_cn_4100_firmware |
< 5.0 cpe:2.3:o:siemens:simatic_cn_4100_firmware:*:*:*:*:*:*:*:* |
| Alpaquita:23 | bellsoft | linux-lts |
>= 6.1.147-r0, < 6.1.151-r0 Fix: upgrade to 6.1.151-r0
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.41-r0, < 6.12.44-r0 Fix: upgrade to 6.12.44-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.92-r1, < 6.18.35-r1 Fix: upgrade to 6.18.35-r1
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
Original advisory text
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.
References
- https://ubuntu.com/security/CVE-2025-39682 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7940-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7940-2 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog Third Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-39682 Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Mailing List Third Party Advisory
- https://git.kernel.org/stable/c/2902c3ebcca52ca845c03182000e8d71d3a5196f Patch
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39682... Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7834-1 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-7835-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-1 Vendor Advisory
- https://source.android.com/security/bulletin/2026-03-01 Vendor Advisory
- https://android.googlesource.com/kernel/common/+/2902c3ebcca52ca845c03182000e8d7... Patch
- https://android.googlesource.com/kernel/common/+/74715c47d57ccbff2f2f00bb9d87288... Patch
- https://git.kernel.org/stable/c/3439c15ae91a517cf3c650ea15a8987699416ad9 Patch
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-... US Government Resource
- https://security-tracker.debian.org/tracker/CVE-2025-39682 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-39682 Third Party Advisory
- https://git.kernel.org/linus/62708b9452f8eb77513115b17c4f8d1a22ebf843 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7833-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7856-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7835-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7887-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7887-2 Vendor Advisory
- https://android.googlesource.com/kernel/common/+/3439c15ae91a517cf3c650ea15a8987... Patch
- https://git.kernel.org/stable/c/29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e Patch
- https://git.kernel.org/stable/c/62708b9452f8eb77513115b17c4f8d1a22ebf843 Patch
- https://git.kernel.org/stable/c/c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677 Patch
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html Third Party Advisory
- https://docs.bell-sw.com/security/cves/CVE-2025-39682 Vendor Advisory
Internet-facing
3 days
and check for signs of compromise
Internal
3 days
and check for signs of compromise
- Known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
3%
chance of attack within 30 days
Type
CWE-754Improper Check for Unusual or Exceptional Conditions
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen6 Mar 2026
Sources
CVE-2025-39682 · OSV
CVE-2025-39682 · MITRE
CVE-2025-39682 · NVD
UBUNTU-CVE-2025-39682 · OSV
ASB-A-440544511 · OSV
CVE-2025-39682 · CISA KEV
DEBIAN-CVE-2025-39682 · OSV
BELL-CVE-2025-39682 · OSV
Track software like this
Free during beta