In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rng_alg expects that the desti…
High CVSS 8.1
Summary
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rng_alg expects that the destination buffer is completely filled if the function returns 0. qcom_rng_read() can run into a situation where the buffer is partially filled with randomness and the remaining part of the buffer is zeroed since qcom_rng_generate() doesn't check the return value. This issue can be reproduced by running…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0f9b7b8df17525e464294c916acc8194ce38446b Exploit
- https://git.kernel.org/stable/c/184f7bd08ce56f003530fc19f160d54e75bf5c9d Exploit
- https://git.kernel.org/stable/c/485995cbc98a4f77cfd4f8ed4dd7ff8ab262964d Exploit
- https://git.kernel.org/stable/c/a680b1832ced3b5fa7c93484248fd221ea0d614b Exploit
- https://git.kernel.org/stable/c/a8e32bbb96c25b7ab29b1894dcd45e0b3b08fd9d Exploit
- https://git.kernel.org/stable/c/ab9337c7cb6f875b6286440b1adfbeeef2b2b2bd Exploit
- https://git.kernel.org/stable/c/0f9b7b8df17525e464294c916acc8194ce38446b Exploit
- https://git.kernel.org/stable/c/184f7bd08ce56f003530fc19f160d54e75bf5c9d Exploit
- https://git.kernel.org/stable/c/485995cbc98a4f77cfd4f8ed4dd7ff8ab262964d Exploit
- https://git.kernel.org/stable/c/a680b1832ced3b5fa7c93484248fd221ea0d614b Exploit
- https://git.kernel.org/stable/c/a8e32bbb96c25b7ab29b1894dcd45e0b3b08fd9d Exploit
- https://git.kernel.org/stable/c/ab9337c7cb6f875b6286440b1adfbeeef2b2b2bd Exploit
Timeline
- nvd_ingest NVD