{"uuid": "8d718b3e-741c-44aa-8daf-0d985d1cf070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-39682", "type": "seen", "source": "https://t.me/pphm_HackerNews/3234", "content": "\ud83d\udd34 Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities\n\nThe Cybersecurity and Infrastructure Security Agency has expanded its Known Exploited Vulnerabilities (KEV) catalog with three Linux kernel flaws, urging federal agencies to immediately patch them.\n\nTracked as CVE-2025-39682 (CVSS score of 9.8), the first of the bugs is a critical-severity issue impacting the kernel\u2019s handling of zero-length records on the rx_list in the TLS receive path.\n\nThis is a corner case where the recvmsg() logic \u2013 each recvmsg() call processes either DATA or non-DATA records \u2013 breaks out of the processing loop when an initial zero-length record is pulled from rx_list.", "creation_timestamp": "2026-09-21T16:19:02.000000Z"}