CVE-2025-40019Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.

0.0/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-04: 1Technical Details · 2026-03-04: 103-04
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Ferramentas Linux@Cezar_H_Linux
    Disclosure

    Heads up, #Ubuntu #Raspberry Pi community! 🍓 USN-7990-6 is here, and it's critical. We're looking at kernel vulnerabilities (CVE-2025-40019) in the Crypto API and Padata subsystems. Read more: 👉 https://tinyurl.com/39mu2tcz #Security https://t.co/3sfnFSbLPa

    Post summary

    The tweet announces the critical Ubuntu USN‑7990‑6, which contains CVE‑2025‑40019 affecting kernel subsystems. No PoC, exploitation code, or active attacks are reported, and a patch is implied by the USN notice.

    0000095
    1.3K followersView on X

Explore more