View Ridge Security
Back to Cyber Hose

Linux Kernel TLS zero-length record flaw CVE-2025-39682 added to CISA

CISA adds a Linux Kernel TLS flaw to its KEV catalog, plus pg_partman SQL injection and IBM Guardium vulnerabilities headline this run.

🚨 ACTIVE EXPLOITATION

  • Linux Kernel TLS zero-length record flaw CVE-2025-39682 added to CISA KEV CVE-2025-39682
    CISA has added a Linux Kernel TLS receive path vulnerability, CVE-2025-39682, to its Known Exploited Vulnerabilities catalog.
    • Applies to Linux Kernel deployments, some of which may be end-of-life or end-of-service; KEV due date is 2026-09-21.
    • The flaw is an improper check for unusual or exceptional conditions in the TLS receive path.
    • A zero-length record retrieved from the rx_list bypasses intended recvmsg() record-type handling.
    • Subsequent TLS records may then be processed using incorrect zero-copy and queuing assumptions.
    Sources 📎 Coverage: nvd.nist.gov · 👁 via CISA KEV

💥 BREACHES & INCIDENTS

  • Early Scattered Spider member Ahmed Elbadawy pleads guilty to cybercrime spree
    Early Scattered Spider member Ahmed Elbadawy pleaded guilty to wire fraud conspiracy and aggravated identity theft, with prosecutors seeking forfeiture of about $17.6 million in assets.
    • Ahmed Hossam Eldin Elbadawy, a 24-year-old from Texas and early Scattered Spider member, pleaded guilty to wire fraud conspiracy and aggravated identity theft for attacks from 2021 to 2023.
    • The crew used social engineering to steal credentials and company data to identify high net worth employees with virtual currency accounts, stealing crypto from their wallets.
    • Victims included at least 12 companies in entertainment, telecom, technology, IT, cloud and virtual currency sectors; 29 victims were compromised overall.
    • Major thefts included nearly $6.35 million in September 2021, $571,000 in June 2022 and nearly $1.7 million in December 2022.
    • Prosecutors seek forfeiture of Bitcoin worth over $14.19 million, Ethereum worth over $3.4 million, cash, luxury vehicles, watches, jewelry and designer bags.
    Sources 📎 Coverage: cyberscoop.com · 👁 via CyberScoop

🔓 CVEs & KEV

  • CVE-2026-61781 — pgpartman pg_partman — CVSS 9.9 — pg_partman has privilege escalation through SQL injection in create_partition...

  • CVE-2026-84064 — IBM Guardium Data Protection — CVSS 9.9 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-82967 — IBM Guardium Data Protection — CVSS 9.8 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-82340 — IBM Guardium Data Protection — CVSS 9.8 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-82832 — IBM Guardium Data Protection — CVSS 9.6 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-93762 — MongoDB Inc. Mongoid — CVSS 9.2 — Mongoid Unsafe Reflection Leads to Data Disclosure and Deletion

  • CVE-2026-84031 — IBM Guardium Data Protection — CVSS 9.0 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-84070 — IBM Guardium Data Protection — CVSS 8.9 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-84034 — IBM Guardium Data Protection — CVSS 8.8 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-93031 — WP Cloud Plugins/deleeuw Use-your-Drive | Google Drive plugin for WordPress — CVSS 8.8 — WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Bo...

  • CVE-2026-82887 — IBM Guardium Data Protection — CVSS 8.8 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-82885 — IBM Guardium Data Protection — CVSS 8.8 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-81933 — IBM Guardium Data Protection — CVSS 8.8 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-82892 — IBM Guardium Data Protection — CVSS 8.1 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-82893 — IBM Guardium Data Protection — CVSS 7.8 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-82896 — IBM Guardium Data Protection — CVSS 7.6 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-84036 — IBM Guardium Data Protection — CVSS 7.4 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-84071 — IBM Guardium Data Protection — CVSS 7.2 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

  • CVE-2026-81937 — IBM Guardium Data Protection — CVSS 7.2 — IBM Guardium Data Protection is affected by multiple vulnerabilities.IBM Guar...

📋 ADVISORIES

  • 📄 Source for Public exploits released for four Linux kernel flaws enabling local root access — heyitsas.im

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check