CVE-2025-399647.8High
Linux Kernel Race Condition Vulnerability
Linux · Kernel
Exploited in the wild · in CISA KEV since 18 SepVendor fix available
1.6%probability of exploitation in the next 30 days
75th percentile
050100
Higher than 75% of scored CVEs
7.8HighCVSS 3.1
LowMediumHighCrit.
Federal deadline
CISA KEV · added 18 Sep · catalogue entry
Passed 42 days ago
DescriptionNVD
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.
CISA required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Coverage5 articles · 4 outlets
One row per outlet, in order of first report. First in our coverage: CISA, 18 Sep.
Quiet for 6 weekslast report 21 Sep5 articles4 outlets
- Fri 18 Sep, 15:31 UTC. CISA, first report. CISA Flags Actively Exploited Linux Kernel Race Condition. Cites a CVE in CISA KEV.
- Fri 18 Sep, 16:18 UTC. CISA. CISA Flags Two Linux Kernel Flaws Under Active Exploitation. Cites a CVE in CISA KEV.
- Fri 18 Sep, 16:55 UTC. SecurityOnline, its first report on the story. CISA Warns of Active Exploitation in Two Linux Kernel Flaws. Cites a CVE in CISA KEV.
- Sun 20 Sep, 17:49 UTC. Security Affairs, its first report on the story. CISA Flags Three Exploited Linux Kernel Flaws for Urgent Patching. Cites a CVE in CISA KEV.
- Mon 21 Sep, 09:50 UTC. SecurityWeek, its first report on the story. CISA Flags Three Exploited Linux Kernel Flaws for Urgent Fixes. Cites a CVE in CISA KEV.
- First report
- Article
- Official notice
- Running total
Added to CISA KEV
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 18 Sep 15:31 | CISA | CISA Flags Actively Exploited Linux Kernel Race Condition |
| 18 Sep 16:18 | CISA | CISA Flags Two Linux Kernel Flaws Under Active Exploitation |
| 18 Sep 16:55 | SecurityOnline | CISA Warns of Active Exploitation in Two Linux Kernel Flaws |
| 20 Sep 17:49 | Security Affairs | CISA Flags Three Exploited Linux Kernel Flaws for Urgent Patching |
| 21 Sep 09:50 | SecurityWeek | CISA Flags Three Exploited Linux Kernel Flaws for Urgent Fixes |
- CISA Flags Three Exploited Linux Kernel Flaws for Urgent FixesSecurityWeek · mentions it in passing
- CISA Flags Three Exploited Linux Kernel Flaws for Urgent PatchingSecurity Affairs · mentions it in passing
- CISA Flags Two Linux Kernel Flaws Under Active ExploitationCISA · official notice
- CISA Flags Actively Exploited Linux Kernel Race ConditionCISA · official notice · first in our coverage
New articles also arrive in the RSS feed.