PT-2025-36277 · Linux+8 · Linux Kernel+8
Publicado
2025-01-01
·
Atualizado
2026-05-22
·
CVE-2025-39682
CVSS v3.1
7.1
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue in the TLS implementation related to handling zero-length records on the
rx list. Each recvmsg() call is designed to process either contiguous DATA records or a single non-DATA record. The code failed to correctly handle scenarios where a zero-length record was encountered after a zero-copy decryption, as the associated skb (socket buffer) was not available for queuing to the rx list. This could lead to unexpected behavior when processing subsequent records.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Allocation of Resources Without Limits
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Almalinux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu