Summary
[5.15.0-314.193.5.5]
- crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38705933] {CVE-2025-40019}
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek64k | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek64k-core | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek64k-devel | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules | 0:5.15.0-314.193.5.5.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules-extra | 0:5.15.0-314.193.5.5.el9uek |
Vulnerabilities 1
-
Unscored —CVE-2025-40019 Public exploit
crypto: essiv - Check ssize for decryption and in-place encryption
In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.