01 Record

CVE-2025-40019

crypto: essiv - Check ssize for decryption and in-place encryption

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

crypto: essiv - Check ssize for decryption and in-place encryption

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.28% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 21.0% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Deferred. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-10-24 11:44Z1 YR AGO

Last updated

2026-05-11 21:40Z5 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

cbff597faf7c4d4eba43af959f3ef1f081ac9c66d0db12f3ed3f350a5ecb714c

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxbe1eb7f78aa8fbe34779c56c266ccd0364604e71 to < 29294dd6f1e7acf527255fb136ffde6602c3a129, be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < 71f03f8f72d9c70ffba76980e78b38c180e61589, be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < df58651968f82344a0ed2afdafd20ecfc55ff548, be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < 248ff2797ff52a8cbf86507f9583437443bf7685, be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < f37e7860dc5e94c70b4a3e38a5809181310ea9ac, be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < dc4c854a5e7453c465fa73b153eba4ef2a240abe, be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < da7afb01ba05577ba3629f7f4824205550644986, be1eb7f78aa8fbe34779c56c266ccd0364604e71 to < 6bb73db6948c2de23e407fe1b7ef94bf02b7529f, 5.4—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/29294dd6f1e7acf527255fb136ffde6602c3a129
git.kernel.orghttps://git.kernel.org/stable/c/71f03f8f72d9c70ffba76980e78b38c180e61589
git.kernel.orghttps://git.kernel.org/stable/c/df58651968f82344a0ed2afdafd20ecfc55ff548
git.kernel.orghttps://git.kernel.org/stable/c/248ff2797ff52a8cbf86507f9583437443bf7685
git.kernel.orghttps://git.kernel.org/stable/c/f37e7860dc5e94c70b4a3e38a5809181310ea9ac
git.kernel.orghttps://git.kernel.org/stable/c/dc4c854a5e7453c465fa73b153eba4ef2a240abe
git.kernel.orghttps://git.kernel.org/stable/c/da7afb01ba05577ba3629f7f4824205550644986
git.kernel.orghttps://git.kernel.org/stable/c/6bb73db6948c2de23e407fe1b7ef94bf02b7529f

07 Fixed in

Debian 12

linux
Fixed in 6.1.158-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.57-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.17.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.