Redpacketsecurity Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation
Article Content
- •CVE-2025-39682 in the Linux kernel allows remote code execution via zero-length TLS records.
- •CISA added the vulnerability to its KEV list on September 18, 2026, with a patch deadline of September 21.
- •Gravity Forms has a separate critical vulnerability (CVE-2026-84434) allowing unauthenticated file uploads.
A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited Vulnerabilities (KEV) list on September 18, 2026, with a remediation deadline of September 21, 2026. The vulnerability can fully compromise the confidentiality, integrity, and availability of affected systems. Public exploits are available, and administrators are urged to patch immediately. The flaw impacts Linux kernel versions from commit 84c61fe1a75b to the stable fix commits. Gravity Forms also has a separate critical vulnerability (CVE-2026-84434) that allows unauthenticated file uploads leading to remote code execution. Organizations using affected software must prioritize updates to mitigate these risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Debian and CVE-2025-39682 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access… 
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…