Memory Corruption in Linux Kernel Crypto Algorithms

CVE-2025-40182

What is CVE-2025-40182?

A vulnerability exists in the Linux kernel related to improper handling of request size in skcipher algorithms. Introduced with the addition of the cra_reqsize field in the crypto_alg structure, the lack of proper initialization in the algorithm framework can lead to memory corruption and crashes. This issue arises when the request size is not accurately set, resulting in undefined behavior during cryptographic operations. Proper initialization routines are necessary to mitigate risks associated with this vulnerability.

References