[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fy0npRSuN4GlTcuitDcpQ5SRIcBNR-q8G3nw6vG2zGO0":3,"g5a-risk:CVE-2025-39682":200},{"success":4,"data":5,"meta":197},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":63,"references":64,"referencesCount":97,"weaknesses":98,"weaknessesCount":107,"isActivelyExploited":4,"cisaInfo":108,"otxData":27,"relatedBlogPosts":110,"seoMetadata":111,"configurations":136,"relatedVendorCves":181,"notableEvents":182},"CVE-2025-39682","What is CVE-2025-39682?","In the Linux kernel, the following vulnerability has been resolved:\n\ntls: fix handling of zero-length records on the rx_list\n\nEach recvmsg() call must process either\n - only contiguous DATA records (any number of them)\n - one non-DATA record\n\nIf the next record has different type than what has already been\nprocessed we break out of the main processing loop. If the record\nhas already been decrypted (which may be the case for TLS 1.3 where\nwe don't know type until decryption) we queue the pending record\nto the rx_list. Next recvmsg() will pick it up from there.\n\nQueuing the skb to rx_list after zero-copy decrypt is not possible,\nsince in that case we decrypted directly to the user space buffer,\nand we don't have an skb to queue (darg.skb points to the ciphertext\nskb for access to metadata like length).\n\nOnly data records are allowed zero-copy, and we break the processing\nloop after each non-data record. So we should never zero-copy and\nthen find out that the record type has changed. The corner case\nwe missed is when the initial record comes from rx_list, and it's\nzero length.","In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process ...","2025-09-05T18:15:44.67","2026-10-07T18:17:13.443",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":36},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"416baaa9-dc9f-4396-8d5f-8c081fb06d67","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[],[],0.0288,[37,37,37,37,37,37,37],"Critical",[41,46,49,54,58],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"linux","linux_kernel","*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":47,"criteria":48,"vulnerable":4},"6.17","cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"debian","debian_linux","11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":44,"criteria":57,"vulnerable":4},"siemens","simatic_cn_4100_firmware","cpe:2.3:o:siemens:simatic_cn_4100_firmware:*:*:*:*:*:*:*:*",{"vendor":55,"product":59,"version":60,"criteria":61,"vulnerable":62},"simatic_cn_4100","-","cpe:2.3:h:siemens:simatic_cn_4100:-:*:*:*:*:*:*:*",false,5,[65,70,73,76,79,82,88,92],{"url":66,"source":67,"tags":68},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F2902c3ebcca52ca845c03182000e8d71d3a5196f","Kernel",[69],"Patch",{"url":71,"source":67,"tags":72},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e",[69],{"url":74,"source":67,"tags":75},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F3439c15ae91a517cf3c650ea15a8987699416ad9",[69],{"url":77,"source":67,"tags":78},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F62708b9452f8eb77513115b17c4f8d1a22ebf843",[69],{"url":80,"source":67,"tags":81},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fc09dd3773b5950e9cfb6c9b9a5f6e36d06c62677",[69],{"url":83,"source":84,"tags":85},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00008.html","Debian",[86,87],"Mailing List","Third Party Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-032379.html","Siemens",[87],{"url":93,"source":94,"tags":95},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39682","CISA",[96],"US Government Resource",8,[99],{"id":100,"name":101,"description":102,"extendedDescription":103,"status":104,"abstraction":105,"structure":106},"CWE-754","Improper Check for Unusual or Exceptional Conditions","The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.","The programmer may assume that certain events or conditions will never occur or do not need to be worried about, such as low memory conditions, lack of access to resources due to restrictive permissions, or misbehaving clients or components. However, attackers may intentionally trigger these unusual conditions, thus violating the programmer's assumptions, possibly introducing instability, incorrect behavior, or a vulnerability.\nNote that this entry is not exclusively about the use of exceptions and exception handling, which are mechanisms for both checking and handling unusual or unexpected conditions.","Incomplete","Class","Simple",1,{"shortDescription":109,"requiredAction":109,"vulnerabilityName":109,"dateAdded":27},"",[],{"title":112,"metaDescription":113,"keywords":114,"canonicalUrl":115,"structuredData":116},"What is CVE-2025-39682? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-39682, a critical severity cyber security vulnerability from 2025. In the Linux kernel, the following vulnerability has be...","CVE-2025-39682, CVE-2025-39682 vulnerability, CVE-2025-39682 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, linux security, debian security, siemens security, linux_kernel vulnerability, debian_linux vulnerability, simatic_cn_4100_firmware vulnerability, simatic_cn_4100 vulnerability","\u002Fwhat-is\u002Fcve-2025-39682",{"@context":117,"@type":118,"headline":112,"description":113,"datePublished":10,"dateModified":11,"author":119,"publisher":123,"about":127,"mainEntityOfPage":131,"articleSection":134,"keywords":135},"https:\u002F\u002Fschema.org","TechArticle",{"@type":120,"name":121,"url":122},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":120,"name":121,"url":122,"logo":124},{"@type":125,"url":126},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":128,"name":6,"description":129,"additionalType":130},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":132,"@id":133},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-39682","Cybersecurity","CVE-2025-39682, CVE-2025-39682 vulnerability, CVE-2025-39682 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[137,163,169],{"Operator":27,"Negate":27,"Nodes":138},[139],{"Operator":140,"Negate":62,"CPEMatch":141},"OR",[142,146,150,154,158,160],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":144,"VersionEndExcluding":145,"VersionEndIncluding":27},"DE30211F-1A6B-457E-B19D-D3E385550199","6.0","6.1.149",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":148,"VersionEndExcluding":149,"VersionEndIncluding":27},"F2293654-7169-49B5-8D0D-EE51EF8B8E48","6.2","6.6.103",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":152,"VersionEndExcluding":153,"VersionEndIncluding":27},"12351F24-1133-4775-960C-F2B47E81298B","6.7","6.12.44",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":155,"VersionStartExcluding":27,"VersionStartIncluding":156,"VersionEndExcluding":157,"VersionEndIncluding":27},"AFC28995-B8C3-4B68-8CB6-78E792B6629D","6.13","6.16.4",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"327D22EF-390B-454C-BD31-2ED23C998A1C",{"Vulnerable":4,"Criteria":161,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*","C730CD9A-D969-4A8E-9522-162AAF7C0EE9",{"Operator":27,"Negate":27,"Nodes":164},[165],{"Operator":140,"Negate":62,"CPEMatch":166},[167],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":168,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Operator":170,"Negate":27,"Nodes":171},"AND",[172,177],{"Operator":140,"Negate":62,"CPEMatch":173},[174],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":175,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":176,"VersionEndIncluding":27},"AA9D4F6E-9336-4026-B485-4227C861B356","5.0",{"Operator":140,"Negate":62,"CPEMatch":178},[179],{"Vulnerable":62,"Criteria":61,"MatchCriteriaID":180,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"92619F5F-3679-4424-9455-3285FF1EF2F1",[],[183,190],{"id":184,"eventType":185,"eventTime":186,"details":187,"label":188,"color":189},"90d5abd4-bdce-4f55-9978-c996667c682d","NEW_NVD","2025-09-06T04:01:05.667139+00:00","New CVE added to NVD","Published to NVD","blue",{"id":191,"eventType":192,"eventTime":193,"details":194,"label":195,"color":196},"81b60f7a-f1e0-4de9-8588-03cc4c523394","NEW_CISA","2026-09-19T04:01:16.367241+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"lastModified":11,"cacheTime":198,"version":199},1792333022102,"2.0",{"score":201,"band":39,"action":202,"scoredAt":203},89,"Emergency patch","2026-10-16T07:08:43.29925+00:00"]