crypto: qcom-rng - Allow zero as a random number (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.16 % · percentile 5 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random.
References
- https://git.kernel.org/stable/c/813e6718a199befc4f26f54bdd899fbfa11515e5
- https://git.kernel.org/stable/c/4c0018320942003bfedd0a1c4cce3f036d363a7f
- https://git.kernel.org/stable/c/143c74034a1c47b0a1a64e7ca7153e7739bd1244
- https://git.kernel.org/stable/c/3c7101cfc52e378bcb0a46962145e39c9051dd5d
- https://git.kernel.org/stable/c/4ef04bdc0c9f98836d1638be516f6bf1bad55f69
European references
- ENISA EUVD · EUVD-2026-75099
- GCVE · GCVE-0-2026-80922
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected f29cd5bb64c258f29b4c49452532481f50eb43ca < 813e6718a199befc4f26f54bdd899fbfa11515e5 ; affected f29cd5bb64c258f29b4c49452532481f50eb43ca < 4c0018320942003bfedd0a1c4cce3f036d363a7f ; affected f29cd5bb64c258f29b4c49452532481f50eb43ca < 143c74034a1c47b0a1a64e7ca7153e7739bd1244 ; affected f29cd5bb64c258f29b4c49452532481f50eb43ca < 3c7101cfc52e378bcb0a46962145e39c9051dd5d ; affected f29cd5bb64c258f29b4c49452532481f50eb43ca < 4ef04bdc0c9f98836d1638be516f6bf1bad55f69 |
| Linux · Linux | affected 6.7 ; unaffected 0 < 6.7 ; unaffected 6.12.108 ≤ 6.12.* ; unaffected 6.18.49 ≤ 6.18.* ; unaffected 7.1.13 ≤ 7.1.* ; unaffected 7.2.3 ≤ 7.2.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |