CVE-2025-40182 — Incorrect Calculation of Buffer Size in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 94.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: skcipher - Fix reqsize handling
Commit afddce13ce81d ("crypto: api - Add reqsize to crypto_alg")
introduced cra_reqsize field in crypto_alg struct to replace type
specific reqsize fields. It looks like this was introduced specifically
for ahash and acomp from the commit description as subsequent commits
add necessary changes in these alg frameworks.
However, this is being recommended for use in all crypto algs [1]
ins…
Affected Packages5 packages
▶CVEListV5linux/linuxafddce13ce81d52a13898fa0700917835c71acd6 — f041339d6b9a5a46437f0c48fc7279c92af7a513+2