Concurrent Writes Vulnerability in Linux Kernel Affecting Socket Operations

CVE-2025-39964

What is CVE-2025-39964?

A vulnerability exists in the Linux kernel's af_alg socket implementation that allows for concurrent writes, potentially leading to data being interleaved unpredictably. This behavior can generate inconsistencies within the internal socket state, ultimately compromising data integrity. To mitigate this issue, a new context write field has been introduced to ensure exclusive ownership for write operations, preventing accidental conflicts when multiple writes are attempted simultaneously.

References