CVE-2025-40019
BaseFortify
Publication date: 2025-10-24
Last updated on: 2025-10-29
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel involves the essiv cryptographic module where the ssize (size of the data) check was not properly performed for decryption and in-place encryption operations. The fix moves the ssize check to the start of the essiv_aead_crypt function to ensure it is checked for these operations, preventing potential issues related to improper data size handling during cryptographic processes.
How can this vulnerability impact me? :
If unpatched, this vulnerability could lead to improper handling of data sizes during decryption and in-place encryption in the essiv cryptographic module, potentially causing cryptographic errors or security weaknesses. This might affect the integrity or confidentiality of encrypted data processed by the Linux kernel.