BaseFortify

Publication date: 2025-11-09

Last updated on: 2025-11-12

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-09

Last Modified

2025-11-12

Generated

2026-07-06

AI Q&A

2025-11-09

EPSS Evaluated

2026-07-05

NVD

CVE-2025-40109

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's crypto random number generator (rng) involves ensuring that the set_ent function is always present. The issue arises because only the deterministic random bit generator (drbg) provides set_ent, and the fix ensures that set_ent is always set to maintain proper functionality.

Impact Analysis

If set_ent is not always present in the rng implementation, it could lead to improper random number generation, potentially weakening cryptographic operations that rely on strong randomness. This could impact system security by making cryptographic keys or operations less secure.

Hi! I’m here to help you understand CVE-2025-40109. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70