01 Record

CVE-2025-40109

crypto: rng - Ensure set_ent is always present

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

crypto: rng - Ensure set_ent is always present

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.22% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 12.9% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Deferred. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-11-09 04:35Z11 MO AGO

Last updated

2026-05-11 21:42Z5 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-331Insufficient EntropyBase

Data version

5.2

Document digest

9086827632f4d0c7b57812423fe68dcf1f581c882da0348f7b5f74992fa23e5b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to < 15d6f42da1bb527629d8e1067b1302d58dec9166, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to < bd903c25b652c331831226cdf56c8179d18e43f4, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to < 17acbcd44fe8dc17dc1072375e76df2d52da6ac8, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to < ab172f4f42626549b02bada05f09e3f2b0cc26ec, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to < c5c703b50e91dd4748769f4c5ab50d9ad60be370, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to < e247a7d138e514a40edda7c4d72c8bd49bb2cad3, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to < 915cb75983bc5e8b80f8a2f25a4af463f7b18c14, 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 to < c0d36727bf39bb16ef0a67ed608e279535ebf0da, 5.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/15d6f42da1bb527629d8e1067b1302d58dec9166
git.kernel.orghttps://git.kernel.org/stable/c/bd903c25b652c331831226cdf56c8179d18e43f4
git.kernel.orghttps://git.kernel.org/stable/c/17acbcd44fe8dc17dc1072375e76df2d52da6ac8
git.kernel.orghttps://git.kernel.org/stable/c/ab172f4f42626549b02bada05f09e3f2b0cc26ec
git.kernel.orghttps://git.kernel.org/stable/c/c5c703b50e91dd4748769f4c5ab50d9ad60be370
git.kernel.orghttps://git.kernel.org/stable/c/e247a7d138e514a40edda7c4d72c8bd49bb2cad3
git.kernel.orghttps://git.kernel.org/stable/c/915cb75983bc5e8b80f8a2f25a4af463f7b18c14
git.kernel.orghttps://git.kernel.org/stable/c/c0d36727bf39bb16ef0a67ed608e279535ebf0da

07 Fixed in

Debian 12

linux
Fixed in 6.1.158-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.57-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.17.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.