Linux Kernel Security Update Advisory (CVE-2025-39964)

Overview

A security update has been released to address a vulnerability in the Linux kernel. The vulnerability is identified as CVE-2025-39964, and a security patch is available through the latest update.

Affected Versions

The following Linux kernel versions are affected:

• 2.6.38 Or later, but earlier than 5.10.245.
• 5.15 Or later, but earlier than 5.15.194.
• 6.1 Or later, but earlier than 6.1.154.
• 6.6 Or higher, but less than 6.6.108.
• 6.12 Or higher, but less than 6.12.49.
• 6.16 Or higher, but less than 6.16.9.
• Less than 6.17.

Vulnerability Details

This vulnerability is a race condition (CVE-2025-39964) that occurs in the AF_ALG (an interface that uses encryption functions via sockets) encrypted sockets of the Linux kernel when processing concurrent writes to the same socket.

Recommended Actions

Follow the instructions on the reference site to update to the latest version with the Vulnerability Patch. The patched versions are as follows:

• 5.10.245.
• 5.15.194.
• 6.1.154.
• 6.6.108.
• 6.12.49.
• 6.16.9.
• 6.17.