Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-40019

crypto: essiv - Check ssize for decryption and in-place encryption

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < 29294dd6f1e7acf527255fb136ffde6602c3a129affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < 71f03f8f72d9c70ffba76980e78b38c180e61589affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < df58651968f82344a0ed2afdafd20ecfc55ff548affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < 248ff2797ff52a8cbf86507f9583437443bf7685affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < f37e7860dc5e94c70b4a3e38a5809181310ea9acaffected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < dc4c854a5e7453c465fa73b153eba4ef2a240abeaffected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < da7afb01ba05577ba3629f7f4824205550644986affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < 6bb73db6948c2de23e407fe1b7ef94bf02b7529faffected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 5.4.301 to ≤ 5.4.*unaffected
  • 5.10.246 to ≤ 5.10.*unaffected
  • 5.15.195 to ≤ 5.15.*unaffected
  • 6.1.157 to ≤ 6.1.*unaffected
  • 6.6.113 to ≤ 6.6.*unaffected
  • 6.12.54 to ≤ 6.12.*unaffected
  • 6.17.4 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References