Summary
[5.4.17-2136.349.3.2]
- crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38705546] {CVE-2025-40019}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2136.349.3.2.el8uek |
| Oracle Linux · 7 | kernel-uek-container | 0:5.4.17-2136.349.3.2.el8uek |
| Oracle Linux · 7 | kernel-uek-container-debug | 0:5.4.17-2136.349.3.2.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2136.349.3.2.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2136.349.3.2.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2136.349.3.2.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2136.349.3.2.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2136.349.3.2.el7uek |
Vulnerabilities 1
-
Unscored —CVE-2025-40019 Public exploit
crypto: essiv - Check ssize for decryption and in-place encryption
In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.