Skip to content
OpenAdvisories

Archive

13 October 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.8
    CVE-2025-39965 Public exploit

    xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

    In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the by…

  • High 7.8
    CVE-2025-39964 Exploited Public exploit

    crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, c…

    KEV Sep 18, 2026