PT-2025-45575 · Linux+3 · Linux Kernel+3

Published 2025-10-02 · Updated 2026-05-07 · CVE-2025-40109

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's crypto/rng module. The issue involves ensuring that the set ent function is always set, as it is only provided by the drbg. This ensures proper functionality of the random number generator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-331

Related Identifiers

BDU:2026-02782

CVE-2025-40109

DLA-4379-1

DLA-4404-1

DSA-6053-1

ECHO-93B4-5342-28D2

OESA-2025-2765

OESA-2025-2766

OESA-2025-2767

OPENSUSE-SU-2025:20172-1

SUSE-SU-2025:4393-1

SUSE-SU-2025:4422-1

SUSE-SU-2025:4505-1

SUSE-SU-2025:4516-1

SUSE-SU-2025:4517-1

SUSE-SU-2025:4521-1

SUSE-SU-2026:20012-1

SUSE-SU-2026:20015-1

SUSE-SU-2026:20021-1

SUSE-SU-2026:20039-1

SUSE-SU-2026:20059-1

SUSE-SU-2026:20473-1

SUSE-SU-2026:20496-1

USN-7906-1

USN-7906-2

USN-7906-3

USN-8033-1

USN-8033-2

USN-8033-3

USN-8033-4

USN-8033-5

USN-8033-6

USN-8033-7

USN-8033-8

USN-8034-1

USN-8034-2

USN-8095-1

USN-8095-2

USN-8095-3

USN-8095-4

USN-8095-5

USN-8100-1

USN-8125-1

USN-8126-1

USN-8141-1

USN-8163-1

USN-8163-2

USN-8165-1

USN-8243-1

USN-8261-1

Affected Products

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 1919

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40109.json · Exploit
• https://ubuntu.com/security/CVE-2025-23144 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38653 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40167 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68191 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68237 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38148 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38279 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8095-5 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22125 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23149 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39844 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68817 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20021-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39746 · Vendor Advisory