In the Linux kernel, the following vulnerability has been resolved:
crypto: essiv - Check ssize for decryption and in-place encryption
Move the ssize check to the start in essivaeadcrypt so that it's also checked for decryption and in-place encryption.
[
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "crypto/essiv.c",
"function": "essiv_aead_crypt"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df58651968f82344a0ed2afdafd20ecfc55ff548",
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"id": "CVE-2025-40019-35a9e6b6"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "crypto/essiv.c",
"function": "essiv_aead_crypt"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@248ff2797ff52a8cbf86507f9583437443bf7685",
"digest": {
"length": 1715.0,
"function_hash": "100901535516143217122065344097545263595"
},
"id": "CVE-2025-40019-bfea9a08"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "crypto/essiv.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@248ff2797ff52a8cbf86507f9583437443bf7685",
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"id": "CVE-2025-40019-d32ccd59"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "crypto/essiv.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df58651968f82344a0ed2afdafd20ecfc55ff548",
"digest": {
"line_hashes": [
"229481655709203330790702229391359549848",
"167242188734077815556356157041631103071",
"215206499314126335958940520584499113853",
"338640206812048379990200770967179871898",
"196154889104413582287178452078425241409",
"335278681893044787618249387129716273512",
"83627861646208207428711788918701653024",
"105490261351432031300420799657068324562",
"226696321289476192193225240153746594725",
"238478646851775848877832607528926983500",
"290261599169332846411694480220999194711",
"30569463059852595246054748508701358090",
"218404321468469163223958995350111625635",
"203688505028695080988398609200223771983",
"284438893237082783322372463963408473344",
"52517924010550961539807494342849201721",
"78781717985840484359091389713620990394",
"290117341337963401855331657598983377943",
"316819313760196976613151914994930494992",
"145386532458360761641948292350827445327"
],
"threshold": 0.9
},
"id": "CVE-2025-40019-f85bb82a"
}
]