{"schema":"vulnpedia.research/1","cve":"CVE-2025-39964","references":[{"url":"https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","url":"https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce"}]},{"url":"https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","url":"https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9"}]},{"url":"https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","url":"https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8"}]},{"url":"https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","url":"https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84"}]},{"url":"https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","url":"https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d"}]},{"url":"https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","url":"https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042"}]},{"url":"https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285","tags":["Patch"],"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-05T12:06:33.126Z","url":"https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39964","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-19T03:56:17.769Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-19T03:56:17.769Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39964"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39964"}]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html","tags":["Third Party Advisory"],"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:08:42.257Z","origins":[{"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:08:42.257Z","url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html","tags":["Third Party Advisory"],"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:08:42.257Z","origins":[{"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:08:42.257Z","url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html"},{"source":"nvd","sourceId":"CVE-2025-39964","modified":"2026-10-19T21:10:00.160","url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2025-39964","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/security/cve/CVE-2025-39964"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403545","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403545"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-39964","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2025-39964"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39964","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39964"}]},{"url":"https://lore.kernel.org/linux-cve-announce/2025101334-CVE-2025-39964-7964@gregkh/T","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://lore.kernel.org/linux-cve-announce/2025101334-CVE-2025-39964-7964@gregkh/T"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:72059","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:72059"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71687","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71687"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71326","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71326"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71601","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71601"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71327","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71327"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:70498","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:70498"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:70402","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:70402"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71592","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71592"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71594","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71594"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:70459","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:70459"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71569","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71569"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:73788","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:73788"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71657","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71657"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71565","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71565"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:70403","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:70403"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71606","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71606"}]},{"source":"euvd","sourceId":"EUVD-2025-34068","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-34068","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2025-34068","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-34068"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2025-39964","modified":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39964","modified":"2026-09-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-39964","modified":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39964","modified":"2026-09-18T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/n1k0oowang/CVE-2025-39964_EXP","source":"poc-in-github","sourceId":"CVE-2025-39964","description":"CVE-2025-39964 EXP","modified":"2026-09-22T15:16:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-39964","url":"https://github.com/n1k0oowang/CVE-2025-39964_EXP"},{"source":"poc-in-github","sourceId":"CVE-2025-39964","modified":"2026-09-22T15:16:18Z","url":"https://github.com/n1k0oowang/CVE-2025-39964_EXP"}],"tags":[]},{"url":"https://github.com/suominen/CVE-2025-39964","source":"poc-in-github","sourceId":"CVE-2025-39964","description":"Tracking CVE-2025-39964, the Linux kernel AF_ALG concurrent-write race","modified":"2026-09-28T08:36:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-39964","url":"https://github.com/suominen/CVE-2025-39964"},{"source":"poc-in-github","sourceId":"CVE-2025-39964","modified":"2026-09-28T08:36:00Z","url":"https://github.com/suominen/CVE-2025-39964"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.20.el10nv.aarch64","product":"kernel-0:6.12.0-231.20.el10nv.aarch64 as a component of NVIDIA for RHEL 10","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:72059"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel@6.12.0-231.20.el10nv?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.164.1.el7.ppc64","product":"kernel-debuginfo-common-ppc64-0:3.10.0-1160.164.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71687"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel-debuginfo-common-ppc64@3.10.0-1160.164.1.el7?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"AppStream-10.0.Z.E2S:python3-perf-0:6.12.0-55.106.1.el10_0.x86_64","product":"python3-perf-0:6.12.0-55.106.1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71326"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/python3-perf@6.12.0-55.106.1.el10_0?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"AppStream-9.2.0.Z.E4S:perf-0:5.14.0-284.194.1.el9_2.x86_64","product":"perf-0:5.14.0-284.194.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71601"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/perf@5.14.0-284.194.1.el9_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"AppStream-9.6.0.Z.EUS:libperf-debuginfo-0:5.14.0-570.143.1.el9_6.s390x","product":"libperf-debuginfo-0:5.14.0-570.143.1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71327"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/libperf-debuginfo@5.14.0-570.143.1.el9_6?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"BaseOS-10.0.Z.E2S:kernel-debug-modules-0:6.12.0-55.106.1.el10_0.ppc64le","product":"kernel-debug-modules-0:6.12.0-55.106.1.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71326"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel-debug-modules@6.12.0-55.106.1.el10_0?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"BaseOS-10.2.Z:kernel-modules-extra-0:6.12.0-211.58.1.el10_2.x86_64","product":"kernel-modules-extra-0:6.12.0-211.58.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70498"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel-modules-extra@6.12.0-211.58.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:python3-perf-debuginfo-0:4.18.0-553.166.1.el8_10.ppc64le","product":"python3-perf-debuginfo-0:4.18.0-553.166.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70402"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/python3-perf-debuginfo@4.18.0-553.166.1.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.218.1.el8_6.x86_64","product":"kernel-debuginfo-common-x86_64-0:4.18.0-372.218.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71592"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel-debuginfo-common-x86_64@4.18.0-372.218.1.el8_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"BaseOS-8.8.0.Z.E4S:kernel-modules-0:4.18.0-477.170.1.el8_8.x86_64","product":"kernel-modules-0:4.18.0-477.170.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71594"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel-modules@4.18.0-477.170.1.el8_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"BaseOS-9.2.0.Z.E4S:perf-debuginfo-0:5.14.0-284.194.1.el9_2.s390x","product":"perf-debuginfo-0:5.14.0-284.194.1.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71601"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/perf-debuginfo@5.14.0-284.194.1.el9_2?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"BaseOS-9.6.0.Z.EUS:kernel-64k-modules-0:5.14.0-570.143.1.el9_6.aarch64","product":"kernel-64k-modules-0:5.14.0-570.143.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71327"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel-64k-modules@5.14.0-570.143.1.el9_6?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.50.1.el9_8.aarch64","product":"kernel-debuginfo-0:5.14.0-687.50.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70459"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel-debuginfo@5.14.0-687.50.1.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"CRB-10.2.Z:perf-debuginfo-0:6.12.0-211.58.1.el10_2.aarch64","product":"perf-debuginfo-0:6.12.0-211.58.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70498"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/perf-debuginfo@6.12.0-211.58.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"NFV-10.0.Z.E2S:kernel-rt-modules-core-0:6.12.0-55.106.1.el10_0.x86_64","product":"kernel-rt-modules-core-0:6.12.0-55.106.1.el10_0.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71326"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel-rt-modules-core@6.12.0-55.106.1.el10_0?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"RT-10.0.Z.E2S:kernel-rt-0:6.12.0-55.106.1.el10_0.x86_64","product":"kernel-rt-0:6.12.0-55.106.1.el10_0.x86_64 as a component of Red Hat Enterprise Linux Real Time EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71326"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/kernel-rt@6.12.0-55.106.1.el10_0?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"RT-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.152.1.el9_4.x86_64","product":"bpftool-debuginfo-0:7.3.0-427.152.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:71569"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/bpftool-debuginfo@7.3.0-427.152.1.el9_4?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"RT-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.50.1.el9_8.x86_64","product":"python3-perf-debuginfo-0:5.14.0-687.50.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:70459"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:rpm/redhat/python3-perf-debuginfo@5.14.0-687.50.1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel","product":"kernel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-abi-whitelists","product":"kernel-abi-whitelists as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-abi-whitelists","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-bootwrapper","product":"kernel-bootwrapper as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-bootwrapper","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-debug","product":"kernel-debug as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-debug-devel","product":"kernel-debug-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug-devel","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-devel","product":"kernel-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-devel","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-doc","product":"kernel-doc as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-doc","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-firmware","product":"kernel-firmware as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-firmware","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-headers","product":"kernel-headers as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-headers","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-kdump","product":"kernel-kdump as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel-kdump-devel","product":"kernel-kdump-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:kernel.src","product":"kernel.src as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:perf","product":"perf as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/perf","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]},{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json","productId":"red_hat_enterprise_linux_6:python-perf","product":"python-perf as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python-perf","origins":[{"source":"redhat","sourceId":"CVE-2025-39964","modified":"2026-10-14T17:49:16+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-39964.json"}]}],"vendorCoverage":{"total":2347,"shown":32,"omitted":2315,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39964","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-09-18T00:00:00Z","modified":"2026-09-18T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Linux","product":"Kernel","dueDate":"2026-09-21T00:00:00Z","cisaDateAdded":"2026-09-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39964","modified":"2026-09-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-39964","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-09-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-39964","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]}]}