Linux kernel RNG: set_ent must be present for DRBG
CVE-2025-40109 Published on November 9, 2025
crypto: rng - Ensure set_ent is always present
In the Linux kernel, the following vulnerability has been resolved:
crypto: rng - Ensure set_ent is always present
Ensure that set_ent is always set since only drbg provides it.
Products Associated with CVE-2025-40109
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2025-40109 are published in these products:
Affected Versions
Linux:- Version 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 and below 15d6f42da1bb527629d8e1067b1302d58dec9166 is affected.
- Version 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 and below bd903c25b652c331831226cdf56c8179d18e43f4 is affected.
- Version 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 and below 17acbcd44fe8dc17dc1072375e76df2d52da6ac8 is affected.
- Version 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 and below ab172f4f42626549b02bada05f09e3f2b0cc26ec is affected.
- Version 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 and below c5c703b50e91dd4748769f4c5ab50d9ad60be370 is affected.
- Version 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 and below e247a7d138e514a40edda7c4d72c8bd49bb2cad3 is affected.
- Version 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 and below 915cb75983bc5e8b80f8a2f25a4af463f7b18c14 is affected.
- Version 77ebdabe8de7c02f43c6de3357f79ff96f9f0579 and below c0d36727bf39bb16ef0a67ed608e279535ebf0da is affected.
- Version 5.10 is affected.
- Before 5.10 is unaffected.
- Version 5.10.246, <= 5.10.* is unaffected.
- Version 5.15.195, <= 5.15.* is unaffected.
- Version 6.1.156, <= 6.1.* is unaffected.
- Version 6.6.111, <= 6.6.* is unaffected.
- Version 6.12.52, <= 6.12.* is unaffected.
- Version 6.16.12, <= 6.16.* is unaffected.
- Version 6.17.2, <= 6.17.* is unaffected.
- Version 6.18, <= * is unaffected.
Exploit Probability
EPSS
0.05%
Percentile
16.34%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.