What’s Vulnerable › Vulnerabilities

CVE-2025-40109: crypto: rng - Ensure set_ent is always present

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-09 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.

Affected products

• Linux kernel: 5.10 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/15d6f42da1bb527629d8e1067b1302d58dec9166
• https://git.kernel.org/stable/c/17acbcd44fe8dc17dc1072375e76df2d52da6ac8
• https://git.kernel.org/stable/c/915cb75983bc5e8b80f8a2f25a4af463f7b18c14
• https://git.kernel.org/stable/c/ab172f4f42626549b02bada05f09e3f2b0cc26ec
• https://git.kernel.org/stable/c/bd903c25b652c331831226cdf56c8179d18e43f4
• https://git.kernel.org/stable/c/c0d36727bf39bb16ef0a67ed608e279535ebf0da
• https://git.kernel.org/stable/c/c5c703b50e91dd4748769f4c5ab50d9ad60be370
• https://git.kernel.org/stable/c/e247a7d138e514a40edda7c4d72c8bd49bb2cad3

Get alerted when CVE-2025-40109 or the next vulnerability affects your stack