Riskcovery

CVE-2025-40019

crypto: essiv - Check ssize for decryption and in-place encryption

State
Published
Severity
Not scored
Published
Oct 24, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: essiv - Check ssize for decryption and in-place encryption

Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before 29294dd6f1e7acf527255fb136ffde6602c3a129Affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before 71f03f8f72d9c70ffba76980e78b38c180e61589Affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before df58651968f82344a0ed2afdafd20ecfc55ff548Affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before 248ff2797ff52a8cbf86507f9583437443bf7685Affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before f37e7860dc5e94c70b4a3e38a5809181310ea9acAffected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before dc4c854a5e7453c465fa73b153eba4ef2a240abeAffected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before da7afb01ba05577ba3629f7f4824205550644986Affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before 6bb73db6948c2de23e407fe1b7ef94bf02b7529fAffected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 5.4.301 through 5.4.*Not affected
  • 5.10.246 through 5.10.*Not affected
  • 5.15.195 through 5.15.*Not affected
  • 6.1.157 through 6.1.*Not affected
  • 6.6.113 through 6.6.*Not affected
  • 6.12.54 through 6.12.*Not affected
  • 6.17.4 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.