---
id: 8821
title: "[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail"
cve: CVE-2025-39964
source_domain: starlabs.sg
source_url: "https://starlabs.sg/blog/2026/09-how-i-found-a-113337-af_alg-linux-local-privilege-escalation-before-copy-fail/"
published_at: "2026-09-24T00:00:00Z"
tags: ["vulnerability-research", "privilege-escalation", "linux-kernel", "race-condition", "exploit-development", "af-alg", "kernelctf", "cve-2025-39964", "docker-escape"]
phying_url: "https://phying.com/item/8821"
lang: en
---

# [CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail

## Summary

A retrospective on CVE-2025-39964, an AF_ALG race condition causing out-of-bounds scatterlist access in the Linux kernel. Exploitation yields root and a Docker container escape.

## Intelligence Metadata

- **Sources:** starlabs.sg
- **CVE:** CVE-2025-39964
- **Published:** 2026-09-24T00:00:00Z
- **Original:** https://starlabs.sg/blog/2026/09-how-i-found-a-113337-af_alg-linux-local-privilege-escalation-before-copy-fail/
- **Phying News:** https://phying.com/item/8821