CVE-2025-40019

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the crypto/essiv module. A missing size check (ssize) during decryption and in-place encryption could potentially lead to problems. The fix involves moving the ssize check to the beginning of the essiv aead crypt function to ensure it is performed for both decryption and in-place encryption operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.