CVE-2025-40019
Linux Kernel 5.4.0-6.17.3 - DoS via ESSIV AEAD Cryptographic Operation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2025-40019. PoCs published by guard-wait, xooxo, 0xAtharv.
AI-analyzed exploit summary This PoC demonstrates a vulnerability in the Linux kernel's AF_ALG socket implementation, specifically targeting the 'essiv(authenc(hmac(sha256),cbc(aes)),sha256)' algorithm. It crafts a malicious key structure to trigger improper handling in the crypto subsystem, potentially leading to a denial-of-service or other impacts.
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.
Exploits (3)
This PoC demonstrates a vulnerability in the Linux kernel's AF_ALG socket implementation, specifically targeting the 'essiv(authenc(hmac(sha256),cbc(aes)),sha256)' algorithm. It crafts a malicious key structure to trigger improper handling in the crypto subsystem, potentially leading to a denial-of-service or other impacts.
This PoC demonstrates a potential DoS vulnerability in the Linux kernel's ESSIV module (CVE-2025-40019) by triggering a kernel hang during cryptographic operations. The code interacts with the AF_ALG interface to manipulate scatterlist structures, which may lead to a deadlock or resource exhaustion.
This PoC demonstrates an out-of-bounds memory access vulnerability in the Linux kernel's ESSIV implementation (CVE-2025-40019) due to insufficient validation of AAD length relative to IV size, leading to a kernel crash. The exploit triggers the bug by providing an assoclen smaller than ivsize, causing a negative offset in scatterwalk_map_and_copy.