Skip to content
Vulnerability intelligence

CVE-2025-39964 — Security Advisory

A race in Linux's AF_ALG crypto API let unprivileged users reach root and escape Docker containers, a researcher says.

2025
What WebPulse reported · 1 analysis
Linux Kernel AF_ALG Flaw Paid $113,337 Bounty, Latent Since 2011

A race in Linux's AF_ALG crypto API let unprivileged users reach root and escape Docker containers, a researcher says.

September 27, 2026
View CVE-2025-39964 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2025-3248 CVE-2025-68788 CVE-2025-67644 CVE-2025-66032 CVE-2025-64755 CVE-2025-59828 CVE-2025-59532 CVE-2025-49113