Verified reference description
The following technical description is credited to the CISA KEV dataset (CC0):
Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.
Record and timeline
- Product: Linux — Kernel
- Identifier: CVE-2025-39682
- CVE record published: 2025-09-05
- Added to CISA KEV: 2026-09-18
- Reference score: 9.8/10, CVSS 3.1; provider: Linux
- Weakness class: CWE-754
A KEV addition date is not a discovery date. CVSS describes technical severity; actual exposure and asset importance also influence remediation priority.
Defensive next steps
Match the installed Linux Kernel version and configuration against the linked technical advisory. Apply the manufacturer-approved fixed release or an explicitly documented mitigation; this profile does not guess a fixed version. Verify the patch and review relevant logs afterward. Plan a supported replacement where the product is end-of-life.
Scope and limitations
This is an awareness and defensive-prioritization profile, not a penetration test or a finding that your network is compromised. KEV membership indicates evidence of real-world exploitation. Mandatory CISA deadlines apply to entities covered by the relevant directive, not universally to every reader.
Reported versions and platforms
The table shows up to ten structured version entries from the official CVE-2025-39682 record. Original field names and values are retained deliberately. This is not an automated exposure verdict or a complete list of every product branch; use the full record and vendor advisory for a deployment decision.
| Product in record | Platform | Version fields — original values | Record status |
|---|---|---|---|
| Linux — Linux | — | version=84c61fe1a75b4255df1e1e7c054c9e6d048da417; lessThan=2902c3ebcca52ca845c03182000e8d71d3a5196f; versionType=git | affected |
| Linux — Linux | — | version=84c61fe1a75b4255df1e1e7c054c9e6d048da417; lessThan=c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677; versionType=git | affected |
| Linux — Linux | — | version=84c61fe1a75b4255df1e1e7c054c9e6d048da417; lessThan=3439c15ae91a517cf3c650ea15a8987699416ad9; versionType=git | affected |
| Linux — Linux | — | version=84c61fe1a75b4255df1e1e7c054c9e6d048da417; lessThan=29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e; versionType=git | affected |
| Linux — Linux | — | version=84c61fe1a75b4255df1e1e7c054c9e6d048da417; lessThan=62708b9452f8eb77513115b17c4f8d1a22ebf843; versionType=git | affected |
| Linux — Linux | — | version=6.0 | affected |
| Linux — Linux | — | version=0; lessThan=6.0; versionType=semver | unaffected |
| Linux — Linux | — | version=6.1.149; lessThanOrEqual=6.1.*; versionType=semver | unaffected |
| Linux — Linux | — | version=6.6.103; lessThanOrEqual=6.6.*; versionType=semver | unaffected |
| Linux — Linux | — | version=6.12.44; lessThanOrEqual=6.12.*; versionType=semver | unaffected |
Full record and technical references
Turn the record into an operational decision
For Linux Kernel, record the asset, effective version, enabled feature and access path. When the reference does not map clearly to your package or branch, retain an explicit unknown status and assign follow-up rather than guessing that the system is safe.
After remediation, record the effective running version, health-check outcome and change time, not merely installation success. Evidence of compromise requires the appropriate incident-response workflow; this page does not diagnose any network as compromised or clean.
Scoring vector and scope
Vector recorded by the reference: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS is owned by FIRST and used by permission. The reference score is not a substitute for organizational risk assessment. Version data comes from the record retrieved for this review and may change when sources are updated.
