HIGHVulnerability
Verified
Global

CISA KEV: Linux Kernel — Linux Kernel Race Condition Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state.

Analysis

Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-18. Remediation due: 2026-09-21.

Indicators of Compromise (1)

CVE (1)
CVE-2025-39964
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 18, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

US sanctions Tren de Aragua gang members in ATM hacks crackdown

The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars in ATM jackpotting attacks across the United States. [...]

BleepingComputer
MEDIUMVulnerability

YouTuber raises $15m for Brazil's 'Cash App'

NG.Cash, the "Brazilian Cash App" founded by a former YouTuber, has raised $15 million to back its efforts to bring credit and crypto services to the country's young, unbanked population.

Finextra
MEDIUMVulnerability

Unidentified Flock Cameras in Florida

St. Lucie County in Florida discovered ( alt link ) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted. I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown. My guess is that in the StingRay case, the devices were operated by foreign actors. This Flock case

Schneier on Security