CVE-2025-39946

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's TLS implementation where the system may not properly abort a connection stream when invalid record headers are detected. Specifically, if the socket has a small buffer and data is received in out-of-band sends followed by a large normal send, the parsing process can lead to an overflow of the allocated skb space. The tls rx msg size() function is involved in this issue, and failing to abort the stream upon detecting an invalid record can cause further data copying and potential memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.