How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
Researcher details CVE-2025-39964, an AF_ALG race that gave unprivileged Linux users root and a $113,337 kernelCTF prize.
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #cve-2025-39964
14-Year-Old Linux Kernel Flaw Lets Local Users Gain Root Access and Escape Containers
Linux kernel bug CVE-2025-39964 gives local users root and can escape Docker; CISA reports exploitation.
14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape
Linux kernel flaw CVE-2025-39964 enables local root and Docker escape and is listed in CISA's KEV catalog.
CISA alerts of active exploitation of three Linux kernel flaws
CISA says three Linux kernel flaws, one critical, are actively exploited and due for federal fixes today.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added two actively exploited Linux kernel flaws, CVE-2025-39964 (race condition) and CVE-2026-53266 (out-of-bounds write), to its KEV Catalog.
2