---
id: 8834
title: "[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail"
cve: CVE-2025-39964
source_domain: idnsec.com
source_url: "https://idnsec.com/research/linux-local-privilege-escalation-with-af-alg/"
published_at: "2026-09-25T00:00:00Z"
tags: ["vulnerability-research", "linux-kernel", "memory-corruption", "container-escape", "race-condition", "kernel-exploitation", "af-alg", "local-privilege-escalation", "kernelctf", "cve-2025-39964"]
phying_url: "https://phying.com/item/8834"
lang: en
---

# [CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail

## Summary

Write-up of CVE-2025-39964, an AF_ALG race condition in the Linux kernel enabling an out-of-bounds scatterlist write. The exploit overwrites core_pattern for root and a Docker container escape.

## Intelligence Metadata

- **Sources:** idnsec.com
- **CVE:** CVE-2025-39964
- **Published:** 2026-09-25T00:00:00Z
- **Original:** https://idnsec.com/research/linux-local-privilege-escalation-with-af-alg/
- **Phying News:** https://phying.com/item/8834