CVE-2025-39682

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 25, 2025

Last Seen

September 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation80.3

A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its...

CISA Flags Active Exploitation of Linux Kernel Vulnerabilities74.0

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including CVE-2025-39964, which allows local attackers to exploit a race condition in AF_ALG sockets. This vulnerability, along with CVE...

Critical Vulnerabilities in Google Android OS Enable Remote Code Execution73.0

Multiple vulnerabilities have been identified in Google Android OS, with the most severe allowing for remote code execution. These flaws could enable attackers to install programs and access sensitive data on affected devices, impacting a wide range of mobile devices including smartphones and tablet...

CISA Urges Urgent Patching for Actively Exploited Linux Kernel Vulnerabilities72.9

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged three Linux kernel vulnerabilities as actively exploited, requiring federal agencies to patch them by September 21, 2026. The vulnerabilities, CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964, were added to CISA's Known E...