CVE-2025-40022

linux: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in...

CVE-2025-40022 is fixed in 37 products on 1 platform, first by DEBIAN-CVE-2025-40022, released October 24, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
n/a
IMPORTANT
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0024
14th percentile

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Commit 1b34cbbf4f01 ("crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg") changed some fields from bool to 1-bit bitfields of type u32. However, some assignments to these fields, specifically 'more' and 'merge', assign values greater than 1. These relied on C's implicit conversion to bool, such that zero becomes false and nonzero becomes true. With a 1-bit bitfields of type u32 instead, mod 2 of the value is taken instead, resulting in 0 being assigned in some cases when 1 was intended. Fix this by restoring the bool type.

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
bpftool · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-64kb · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-64kb · sles 16.0 6.12.0-160000.37.1 SUSE-SU-2026:23231-1 Aug 11, 2026
kernel-azure · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-azure · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-azure · sles 16.0 6.12.0-160000.37.1 SUSE-SU-2026:23231-1 Aug 11, 2026
kernel-default · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-default · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-default · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-default · sles 16.0 6.12.0-160000.37.1 SUSE-SU-2026:23237-1 Aug 11, 2026
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.37.1.160000.2.19 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-default-base · sles 15.6 6.4.0-150600.23.135.1.150600.12.62.4 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.81.1.150700.17.45.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-default-base · sles 16.0 6.12.0-160000.37.1.160000.2.19 SUSE-SU-2026:23231-1 Aug 11, 2026
kernel-docs · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-docs · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-docs · sles 16.0 6.12.0-160000.37.1 SUSE-SU-2026:23231-1 Aug 11, 2026
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-kvmsmall · sles 16.0 6.12.0-160000.37.1 SUSE-SU-2026:23231-1 Aug 11, 2026
kernel-livepatch-SLE15-SP6_Update_31 · sles 15.6 1-150600.13.3.4 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-livepatch-SLE15-SP7-RT_Update_20 · sles 15.7 1-150700.1.3.1 SUSE-SU-2026:4120-1 Sep 10, 2026
kernel-livepatch-SLE15-SP7_Update_21 · sles 15.7 1-150700.15.3.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-obs-build · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-obs-qa · sles 16.0 6.12.0-160000.37.1 SUSE-SU-2026:23231-1 Aug 11, 2026
kernel-rt · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-source · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-source · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-source · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-source · sles 16.0 6.12.0-160000.37.1 SUSE-SU-2026:23231-1 Aug 11, 2026
kernel-syms · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-syms · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-syms · sles 16.0 6.12.0-160000.37.1 SUSE-SU-2026:23231-1 Aug 11, 2026
kernel-uek · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-container · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-container · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-container-debug · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-container-debug · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-core · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-core · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug-core · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug-core · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug-devel · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug-devel · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug-modules · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug-modules · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug-modules-extra · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-debug-modules-extra · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-devel · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-devel · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-doc · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-doc · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-modules · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-modules · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-modules-extra · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-modules-extra · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek-tools · ol 8 0:5.4.17-2136.351.3.3.el7uek ELSA-2026-50071 Jan 26, 2026
kernel-uek64k · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek64k · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek64k-core · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek64k-core · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek64k-devel · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek64k-devel · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek64k-modules · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek64k-modules · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek64k-modules-extra · ol 8 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-uek64k-modules-extra · ol 9 0:5.15.0-315.196.5.1.el9uek ELSA-2025-28048 Dec 12, 2025
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.37.1 OPENSUSE-SU-2026:21555-1 Aug 12, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-zfcpdump · sles 16.0 6.12.0-160000.37.1 SUSE-SU-2026:23231-1 Aug 11, 2026
linux · Debian 12.15 (bookworm) 6.1.158-1 DEBIAN-CVE-2025-40022 Oct 24, 2025
linux · Debian 13.5 (trixie) 6.12.57-1 DEBIAN-CVE-2025-40022 Oct 24, 2025
linux · Debian 14 6.16.10-1 DEBIAN-CVE-2025-40022 Oct 24, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.