CVE-2025-40109 addresses a vulnerability in the Linux kernel's cryptographic random number generator (RNG) where the 'set_ent' function was not consistently present, specifically impacting non-DRBG implementations. While a direct CVSS score is unavailable, its FAUCET Risk Score of 5/100 suggests a low severity, indicating a limited attack surface and potential impact. There is currently no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting a low-profile vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 5.10CNA affecteddefault affected | |
| Linux | Linux | >= 77ebdabe8de7c02f43c6de3357f79ff96f9f0579, < 15d6f42da1bb527629d8e1067b1302d58dec9166, >= 77ebdabe8de7c02f43c6de3357f79ff96f9f0579, < 17acbcd44fe8dc17dc1072375e76df2d52da6ac8, >= 77ebdabe8de7c02f43c6de3357f79ff96f9f0579, < 915cb75983bc5e8b80f8a2f25a4af463f7b18c14, >= 77ebdabe8de7c02f43c6de3357f79ff96f9f0579, < ab172f4f42626549b02bada05f09e3f2b0cc26ec, >= 77ebdabe8de7c02f43c6de3357f79ff96f9f0579, < bd903c25b652c331831226cdf56c8179d18e43f4, >= 77ebdabe8de7c02f43c6de3357f79ff96f9f0579, < c0d36727bf39bb16ef0a67ed608e279535ebf0da, >= 77ebdabe8de7c02f43c6de3357f79ff96f9f0579, < c5c703b50e91dd4748769f4c5ab50d9ad60be370, >= 77ebdabe8de7c02f43c6de3357f79ff96f9f0579, < e247a7d138e514a40edda7c4d72c8bd49bb2cad3CNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
Apr 13, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 9, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 9, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (AWS) vulnerabilities
Mar 23, 2026Linux kernel (Real-time) vulnerabilities
Mar 17, 2026Linux kernel (FIPS) vulnerabilities
Mar 16, 2026Linux kernel (NVIDIA) vulnerabilities
Mar 16, 2026Linux kernel vulnerabilities
Mar 16, 2026crypto: rng - Ensure set_ent is always present
Nov 11, 2025kernel: Linux kernel: Denial of Service in crypto random number generator due to missing set_ent
Nov 9, 2025