VDB
DEBIAN-CVE-2025-40019
DEBIAN-CVE-2025-40019
PUBLISHED
In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | linux | 6.12.48-1, 6.12.43-1, 6.12.43-1 |
| Debian:11 | linux | 5.10.234-1, 5.10.226-1, 5.10.223-1 |
| Debian:11 | linux-6.1 | 6.1.106-3~deb11u3, 0, 6.1.106-3~deb11u1 |
| Debian:12 | linux | 6.1.147-1, 0, 6.1.106-1 |
| Debian:14 | linux | 0, 6.16.12-1, * |
Timeline
- Oct 24, 2025 CVE Published
- Apr 28, 2026 CVE Updated