Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2025-40109— crypto: rng - Ensure set_ent is always present

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于未确保set_ent始终存在,可能导致加密随机数生成问题。

EPSS 0.22% · P12

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 77ebdabe8de7c02f43c6de3357f79ff96f9f0579< 15d6f42da1bb527629d8e1067b1302d58dec9166 affected
77ebdabe8de7c02f43c6de3357f79ff96f9f0579< bd903c25b652c331831226cdf56c8179d18e43f4 affected
77ebdabe8de7c02f43c6de3357f79ff96f9f0579< 17acbcd44fe8dc17dc1072375e76df2d52da6ac8 affected
77ebdabe8de7c02f43c6de3357f79ff96f9f0579< ab172f4f42626549b02bada05f09e3f2b0cc26ec affected
77ebdabe8de7c02f43c6de3357f79ff96f9f0579< c5c703b50e91dd4748769f4c5ab50d9ad60be370 affected
77ebdabe8de7c02f43c6de3357f79ff96f9f0579< e247a7d138e514a40edda7c4d72c8bd49bb2cad3 affected
77ebdabe8de7c02f43c6de3357f79ff96f9f0579< 915cb75983bc5e8b80f8a2f25a4af463f7b18c14 affected
77ebdabe8de7c02f43c6de3357f79ff96f9f0579< c0d36727bf39bb16ef0a67ed608e279535ebf0da affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-40109

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
crypto: rng - Ensure set_ent is always present
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于未确保set_ent始终存在,可能导致加密随机数生成问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 ~ 15d6f42da1bb527629d8e1067b1302d58dec9166 -
Linux Linux 5.10 -

II. Public POCs for CVE-2025-40109

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-40109

请登录查看更多情报信息。

Other References for CVE-2025-40109 (2)

IV. Related Vulnerabilities

V. Comments for CVE-2025-40109

No comments yet


Leave a comment