In the Linux kernel, the following vulnerability has been resolved:
crypto: essiv - Check ssize for decryption and in-place encryption
Move the ssize check to the start in essivaeadcrypt so that it's also checked for decryption and in-place encryption.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71f03f8f72d9c70ffba76980e78b38c180e61589",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-40019-247b72ed",
"target": {
"file": "crypto/essiv.c"
},
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@29294dd6f1e7acf527255fb136ffde6602c3a129",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-40019-29de25a5",
"target": {
"file": "crypto/essiv.c"
},
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@29294dd6f1e7acf527255fb136ffde6602c3a129",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-40019-2fac6db2",
"target": {
"function": "essiv_aead_crypt",
"file": "crypto/essiv.c"
},
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df58651968f82344a0ed2afdafd20ecfc55ff548",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-40019-35a9e6b6",
"target": {
"function": "essiv_aead_crypt",
"file": "crypto/essiv.c"
},
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da7afb01ba05577ba3629f7f4824205550644986",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-40019-60fadd3a",
"target": {
"file": "crypto/essiv.c"
},
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f37e7860dc5e94c70b4a3e38a5809181310ea9ac",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-40019-647b9000",
"target": {
"file": "crypto/essiv.c"
},
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc4c854a5e7453c465fa73b153eba4ef2a240abe",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-40019-7fff80c6",
"target": {
"function": "essiv_aead_crypt",
"file": "crypto/essiv.c"
},
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da7afb01ba05577ba3629f7f4824205550644986",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-40019-ab5b43f0",
"target": {
"function": "essiv_aead_crypt",
"file": "crypto/essiv.c"
},
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@248ff2797ff52a8cbf86507f9583437443bf7685",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-40019-bfea9a08",
"target": {
"function": "essiv_aead_crypt",
"file": "crypto/essiv.c"
},
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6bb73db6948c2de23e407fe1b7ef94bf02b7529f",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-40019-c93e67fe",
"target": {
"function": "essiv_aead_crypt",
"file": "crypto/essiv.c"
},
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6bb73db6948c2de23e407fe1b7ef94bf02b7529f",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-40019-d30ef087",
"target": {
"file": "crypto/essiv.c"
},
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@248ff2797ff52a8cbf86507f9583437443bf7685",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-40019-d32ccd59",
"target": {
"file": "crypto/essiv.c"
},
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71f03f8f72d9c70ffba76980e78b38c180e61589",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-40019-d3c1ed7a",
"target": {
"function": "essiv_aead_crypt",
"file": "crypto/essiv.c"
},
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f37e7860dc5e94c70b4a3e38a5809181310ea9ac",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-40019-da9a8f94",
"target": {
"function": "essiv_aead_crypt",
"file": "crypto/essiv.c"
},
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc4c854a5e7453c465fa73b153eba4ef2a240abe",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-40019-daee6aa6",
"target": {
"file": "crypto/essiv.c"
},
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df58651968f82344a0ed2afdafd20ecfc55ff548",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-40019-f85bb82a",
"target": {
"file": "crypto/essiv.c"
},
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"deprecated": false
}
]