{"schema":"vulnpedia.research/1","cve":"CVE-2025-39682","references":[{"url":"https://git.kernel.org/stable/c/2902c3ebcca52ca845c03182000e8d71d3a5196f","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","url":"https://git.kernel.org/stable/c/2902c3ebcca52ca845c03182000e8d71d3a5196f"},{"source":"nvd","sourceId":"CVE-2025-39682","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/2902c3ebcca52ca845c03182000e8d71d3a5196f"}]},{"url":"https://git.kernel.org/stable/c/c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","url":"https://git.kernel.org/stable/c/c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677"},{"source":"nvd","sourceId":"CVE-2025-39682","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677"}]},{"url":"https://git.kernel.org/stable/c/3439c15ae91a517cf3c650ea15a8987699416ad9","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","url":"https://git.kernel.org/stable/c/3439c15ae91a517cf3c650ea15a8987699416ad9"},{"source":"nvd","sourceId":"CVE-2025-39682","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/3439c15ae91a517cf3c650ea15a8987699416ad9"}]},{"url":"https://git.kernel.org/stable/c/29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","url":"https://git.kernel.org/stable/c/29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e"},{"source":"nvd","sourceId":"CVE-2025-39682","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e"}]},{"url":"https://git.kernel.org/stable/c/62708b9452f8eb77513115b17c4f8d1a22ebf843","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:04:31.384Z","url":"https://git.kernel.org/stable/c/62708b9452f8eb77513115b17c4f8d1a22ebf843"},{"source":"nvd","sourceId":"CVE-2025-39682","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/62708b9452f8eb77513115b17c4f8d1a22ebf843"}]},{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-03T17:42:13.673Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-03T17:42:13.673Z","url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"},{"source":"nvd","sourceId":"CVE-2025-39682","modified":"2026-10-19T21:10:00.160","url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"}]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html","tags":["Third Party Advisory"],"source":"mitre","sourceId":"siemens-SADP","modified":"2026-05-12T12:06:08.852Z","origins":[{"source":"mitre","sourceId":"siemens-SADP","modified":"2026-05-12T12:06:08.852Z","url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"},{"source":"nvd","sourceId":"CVE-2025-39682","modified":"2026-10-19T21:10:00.160","url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39682","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T17:56:14.826Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-07T17:56:14.826Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39682"},{"source":"nvd","sourceId":"CVE-2025-39682","modified":"2026-10-19T21:10:00.160","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39682"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2025-39682","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://access.redhat.com/security/cve/CVE-2025-39682"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393511","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393511"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-39682","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2025-39682"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39682","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39682"}]},{"url":"https://lore.kernel.org/linux-cve-announce/2025090545-CVE-2025-39682-ddab@gregkh/T","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://lore.kernel.org/linux-cve-announce/2025090545-CVE-2025-39682-ddab@gregkh/T"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:16904","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://access.redhat.com/errata/RHSA-2025:16904"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:19104","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://access.redhat.com/errata/RHSA-2025:19104"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:16880","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://access.redhat.com/errata/RHSA-2025:16880"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:19224","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://access.redhat.com/errata/RHSA-2025:19224"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:19223","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://access.redhat.com/errata/RHSA-2025:19223"}]},{"source":"euvd","sourceId":"EUVD-2025-31542","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-31542","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2025-31542","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-31542"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2025-39682","modified":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39682","modified":"2026-09-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-39682","modified":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39682","modified":"2026-09-18T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://vulncheck.com/xdb/6a8c414d19be","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"6a8c414d19be","modified":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6a8c414d19be","modified":"2026-09-18T00:00:00Z","url":"https://vulncheck.com/xdb/6a8c414d19be"}]},{"url":"https://github.com/khoatran107/cve-2025-39682","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"6a8c414d19be","modified":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6a8c414d19be","modified":"2026-09-18T00:00:00Z","url":"https://github.com/khoatran107/cve-2025-39682"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/khoatran107/cve-2025-39682","source":"poc-in-github","sourceId":"CVE-2025-39682","description":"A variant of CVE-2024-58239","modified":"2026-09-29T03:48:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-39682","url":"https://github.com/khoatran107/cve-2025-39682"},{"source":"poc-in-github","sourceId":"CVE-2025-39682","modified":"2026-09-29T03:48:35Z","url":"https://github.com/khoatran107/cve-2025-39682"}],"tags":[]},{"url":"https://github.com/suominen/CVE-2025-39682","source":"poc-in-github","sourceId":"CVE-2025-39682","description":"Tracking CVE-2025-39682, the Linux kernel kTLS zero-length record use-after-free","modified":"2026-09-28T08:35:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-39682","url":"https://github.com/suominen/CVE-2025-39682"},{"source":"poc-in-github","sourceId":"CVE-2025-39682","modified":"2026-09-28T08:35:58Z","url":"https://github.com/suominen/CVE-2025-39682"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"6a8c414d19be","url":"https://vulncheck.com/xdb/6a8c414d19be","cve":"CVE-2025-39682","dateAdded":"2025-10-14T07:59:03Z","modified":"2026-09-18T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/khoatran107/cve-2025-39682","observations":[{"dateAdded":"2025-10-14T07:59:03Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"6a8c414d19be","modified":"2026-09-18T00:00:00Z","url":"https://vulncheck.com/xdb/6a8c414d19be"}]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"AppStream-10.0.Z:kernel-64k-debug-debuginfo-0:6.12.0-55.37.1.el10_0.aarch64","product":"kernel-64k-debug-debuginfo-0:6.12.0-55.37.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:16904"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-64k-debug-debuginfo@6.12.0-55.37.1.el10_0?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"AppStream-10.0.Z:rv-0:6.12.0-55.37.1.el10_0.ppc64le","product":"rv-0:6.12.0-55.37.1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:16904"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/rv@6.12.0-55.37.1.el10_0?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"AppStream-9.4.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-427.96.1.el9_4.aarch64","product":"kernel-64k-debuginfo-0:5.14.0-427.96.1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:19104"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-64k-debuginfo@5.14.0-427.96.1.el9_4?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"AppStream-9.6.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-570.49.1.el9_6.aarch64","product":"kernel-debug-debuginfo-0:5.14.0-570.49.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:16880"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-debug-debuginfo@5.14.0-570.49.1.el9_6?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"BaseOS-10.0.Z:kernel-0:6.12.0-55.37.1.el10_0.src","product":"kernel-0:6.12.0-55.37.1.el10_0.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:16904"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel@6.12.0-55.37.1.el10_0?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"BaseOS-10.0.Z:kernel-tools-0:6.12.0-55.37.1.el10_0.x86_64","product":"kernel-tools-0:6.12.0-55.37.1.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:16904"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-tools@6.12.0-55.37.1.el10_0?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"BaseOS-9.2.0.Z.E4S:kernel-debug-modules-0:5.14.0-284.144.1.el9_2.aarch64","product":"kernel-debug-modules-0:5.14.0-284.144.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:19224"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-debug-modules@5.14.0-284.144.1.el9_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"BaseOS-9.4.0.Z.EUS:kernel-0:5.14.0-427.96.1.el9_4.s390x","product":"kernel-0:5.14.0-427.96.1.el9_4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:19104"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel@5.14.0-427.96.1.el9_4?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"BaseOS-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.96.1.el9_4.aarch64","product":"kernel-tools-debuginfo-0:5.14.0-427.96.1.el9_4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:19104"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-tools-debuginfo@5.14.0-427.96.1.el9_4?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"BaseOS-9.6.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-570.49.1.el9_6.ppc64le","product":"kernel-debug-modules-extra-0:5.14.0-570.49.1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:16880"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-debug-modules-extra@5.14.0-570.49.1.el9_6?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"CRB-10.0.Z:kernel-debuginfo-common-ppc64le-0:6.12.0-55.37.1.el10_0.ppc64le","product":"kernel-debuginfo-common-ppc64le-0:6.12.0-55.37.1.el10_0.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:16904"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-debuginfo-common-ppc64le@6.12.0-55.37.1.el10_0?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"CRB-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.96.1.el9_4.s390x","product":"perf-debuginfo-0:5.14.0-427.96.1.el9_4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:19104"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/perf-debuginfo@5.14.0-427.96.1.el9_4?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"NFV-9.2.0.Z.E4S:kernel-rt-0:5.14.0-284.144.1.rt14.429.el9_2.src","product":"kernel-rt-0:5.14.0-284.144.1.rt14.429.el9_2.src as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:19223"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-rt@5.14.0-284.144.1.rt14.429.el9_2?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"RT-10.0.Z:kernel-rt-0:6.12.0-55.37.1.el10_0.aarch64","product":"kernel-rt-0:6.12.0-55.37.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:16904"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-rt@6.12.0-55.37.1.el10_0?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"RT-9.4.0.Z.EUS:kernel-rt-debug-0:5.14.0-427.96.1.el9_4.x86_64","product":"kernel-rt-debug-0:5.14.0-427.96.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:19104"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/kernel-rt-debug@5.14.0-427.96.1.el9_4?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"RT-9.6.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-570.49.1.el9_6.x86_64","product":"python3-perf-debuginfo-0:5.14.0-570.49.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.","url":"https://access.redhat.com/errata/RHSA-2025:16880"},{"category":"workaround","details":"To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically."}],"purl":"pkg:rpm/redhat/python3-perf-debuginfo@5.14.0-570.49.1.el9_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_6:kernel","product":"kernel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_6:kernel-doc","product":"kernel-doc as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-doc","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_6:perf","product":"perf as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/perf","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_7:kernel-debug","product":"kernel-debug as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_7:kernel-kdump-devel","product":"kernel-kdump-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_7:kernel-rt-doc","product":"kernel-rt-doc as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-doc","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_7:kernel-tools","product":"kernel-tools as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_8:bpftool","product":"bpftool as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bpftool","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_8:kernel-cross-headers","product":"kernel-cross-headers as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-cross-headers","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_8:kernel-debug-modules-internal","product":"kernel-debug-modules-internal as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_8:kernel-modules-extra","product":"kernel-modules-extra as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-modules-extra","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_8:kernel-rt-debug-devel","product":"kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_8:kernel-rt-kvm","product":"kernel-rt-kvm as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-kvm","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_8:kernel-selftests-internal","product":"kernel-selftests-internal as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-selftests-internal","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_8:kernel-zfcpdump-devel","product":"kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-zfcpdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]},{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json","productId":"red_hat_enterprise_linux_8:python3-perf","product":"python3-perf as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python3-perf","origins":[{"source":"redhat","sourceId":"CVE-2025-39682","modified":"2026-09-21T12:58:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39682.json"}]}],"vendorCoverage":{"total":1182,"shown":32,"omitted":1150,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39682","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-09-18T00:00:00Z","modified":"2026-09-18T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Linux","product":"Kernel","dueDate":"2026-09-21T00:00:00Z","cisaDateAdded":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39682","modified":"2026-09-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-39682","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-09-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39682","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]}]}