Wind River Support Network

HomeDefectsLIN1024-12975
Acknowledged

LIN1024-12975 : Security Advisory - linux - CVE-2025-40022

Created: Oct 26, 2025    Updated: Oct 28, 2025
Found In Version: 10.24.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]crypto: af_alg - Fix incorrect boolean values in af_alg_ctx[EOL][EOL]Commit 1b34cbbf4f01 ("crypto: af_alg - Disallow concurrent writes in[EOL]af_alg_sendmsg") changed some fields from bool to 1-bit bitfields of[EOL]type u32.[EOL][EOL]However, some assignments to these fields, specifically 'more' and[EOL]'merge', assign values greater than 1.  These relied on C's implicit[EOL]conversion to bool, such that zero becomes false and nonzero becomes[EOL]true.[EOL][EOL]With a 1-bit bitfields of type u32 instead, mod 2 of the value is taken[EOL]instead, resulting in 0 being assigned in some cases when 1 was intended.[EOL][EOL]Fix this by restoring the bool type.
Live chat
Online