Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected f29cd5bb64c258f29b4c49452532481f50eb43ca before 813e6718a199befc4f26f54bdd899fbfa11515e5; affected f29cd5bb64c258f29b4c49452532481f50eb43ca before 4c0018320942003bfedd0a1c4cce3f036d363a7f; affected f29cd5bb64c258f29b4c49452532481f50eb43ca before 143c74034a1c47b0a1a64e7ca7153e7739bd1244; affected f29cd5bb64c258f29b4c49452532481f50eb43ca before 3c7101cfc52e378bcb0a46962145e39c9051dd5d; affected f29cd5bb64c258f29b4c49452532481f50eb43ca before 4ef04bdc0c9f98836d1638be516f6bf1bad55f69 |
| Linux / Linux | affected 6.7; unaffected 0 before 6.7; unaffected 6.12.108 through 6.12.*; unaffected 6.18.49 through 6.18.*; unaffected 7.1.13 through 7.1.*; unaffected 7.2.3 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/813e6718a199befc4f26f54bdd899fbfa11515e5
- https://git.kernel.org/stable/c/4c0018320942003bfedd0a1c4cce3f036d363a7f
- https://git.kernel.org/stable/c/143c74034a1c47b0a1a64e7ca7153e7739bd1244
- https://git.kernel.org/stable/c/3c7101cfc52e378bcb0a46962145e39c9051dd5d
- https://git.kernel.org/stable/c/4ef04bdc0c9f98836d1638be516f6bf1bad55f69