Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

CVE-2025-39682 Critical CVSS 9.8 In-The-Wild Exploited
Beranda Advisories CVE-2025-39682

Ringkasan Kerentanan (Vulnerability Overview)

Rilis: 01 October 2026
Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

Tindakan Mitigasi yang Wajib Diterapkan (Required Action)

Instruksi Keamanan untuk Pengelola TI / OPD
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Seluruh pengelola server dan aplikasi di lingkungan OPD Kabupaten Ciamis diimbau untuk segera mengaudit perangkat terdampak dan mengaplikasikan patch sebelum batas waktu mitigasi.

Produk & Versi Terdampak

Produk Versi Basis Batas Terdampak Status Keamanan
Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 2902c3ebcca52ca845c03182000e8d71d3a5196f AFFECTED
Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677 AFFECTED
Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 3439c15ae91a517cf3c650ea15a8987699416ad9 AFFECTED
Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e AFFECTED
Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 62708b9452f8eb77513115b17c4f8d1a22ebf843 AFFECTED
Linux 6.0 — AFFECTED
Linux 0 6.0 UNAFFECTED
Linux 6.1.149 — UNAFFECTED
Linux 6.6.103 — UNAFFECTED
Linux 6.12.44 — UNAFFECTED

Threat Intelligence Matrix

CVE Identifier
CVE-2025-39682
Vendor / Project Linux
Produk Terdampak Kernel
Skor CVSS
9.8 / 10.0
Status Eksploitasi AKTIF (In-The-Wild)
Kampanye Ransomware Tidak Diketahui
Automatable (Wormable) Unknown
Dampak Teknis Total
Sumber Intelijen CISA KEV

Butuh Pendampingan Mitigasi?

Tim Ciamiskab-CSIRT siap mendampingi verifikasi kerentanan dan langkah pengamanan aset digital OPD Anda.

Lapor ke CSIRT WhatsApp Hotline CSIRT
CSIRT Assistant
Halo 👋 Ada yang bisa saya bantu? Jika perlu, chat ini bisa diteruskan ke admin.
Scroll