Back to CVE records
Not yet scoredPublished Nov 8, 2025
CVE-2025-40109crypto: rng - Ensure set_ent is always present
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 builds before 15d6f42da1bb527629d8e1067b1302d58dec9166; from 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 before bd903c25b652c331831226cdf56c8179d18e43f4; 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 builds before 17acbcd44fe8dc17dc1072375e76df2d52da6ac8; from 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 before ab172f4f42626549b02bada05f09e3f2b0cc26ec; from 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 before c5c703b50e91dd4748769f4c5ab50d9ad60be370; from 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 before e247a7d138e514a40edda7c4d72c8bd49bb2cad3; from 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 before 915cb75983bc5e8b80f8a2f25a4af463f7b18c14; from 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 before c0d36727bf39bb16ef0a67ed608e279535ebf0da | CNA record |
References
- https://git.kernel.org/stable/c/15d6f42da1bb527629d8e1067b1302d58dec9166
- https://git.kernel.org/stable/c/bd903c25b652c331831226cdf56c8179d18e43f4
- https://git.kernel.org/stable/c/17acbcd44fe8dc17dc1072375e76df2d52da6ac8
- https://git.kernel.org/stable/c/ab172f4f42626549b02bada05f09e3f2b0cc26ec
- https://git.kernel.org/stable/c/c5c703b50e91dd4748769f4c5ab50d9ad60be370
- https://git.kernel.org/stable/c/e247a7d138e514a40edda7c4d72c8bd49bb2cad3
- https://git.kernel.org/stable/c/915cb75983bc5e8b80f8a2f25a4af463f7b18c14
- https://git.kernel.org/stable/c/c0d36727bf39bb16ef0a67ed608e279535ebf0da
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.