Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2025-39682, CVE-2025-39964, CVE-2026-53266
By Roy Kalfon |
19 September 2026
Multiple CVEs – Linux kernel kTLS UAF, AF_ALG race, and netfilter ebtables memory corruption enable local compromise
Linux kernel flaws added around the same time to CISA KEV due to in-wild exploitation: kTLS RX zero-length record handling triggers kTLS receive-path UAF (CVE-2025-39682); concurrent af_alg_sendmsg writes cause AF_ALG socket state race/DoS (CVE-2025-39964); netfilter bridge ebt_snat ARP SHA rewrite can cause OOB write/memory corruption (CVE-2026-53266). Patch kernel to vendor-fixed builds.