Описание
In the Linux kernel, the following vulnerability has been resolved:
crypto: drbg - Fix returning success on failure in CTR_DRBG
drbg_ctr_generate() sometimes returns success when it fails, leaving the output buffer uninitialized. Fix it.
In the Linux kernel, the following vulnerability has been resolved:
crypto: drbg - Fix returning success on failure in CTR_DRBG
drbg_ctr_generate() sometimes returns success when it fails, leaving the output buffer uninitialized. Fix it.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-64306
- https://git.kernel.org/stable/c/074db6db03a0aaa78f05ca9d4838053713796665
- https://git.kernel.org/stable/c/23b8b188cb32e5531d0f8d3af9506f8959cb369e
- https://git.kernel.org/stable/c/39a31ad9e2a5ed7e9c9c6f711dca96c8c8f5f26b
- https://git.kernel.org/stable/c/75597e8774f319152744d24e0683d9393540a951
- https://git.kernel.org/stable/c/7b03312491f9fe6ba4d60c4023e7e61d2d1fed96
- https://git.kernel.org/stable/c/a9e886f73dd717027028bb7e3bbca93601ecdfc7
- https://git.kernel.org/stable/c/bbbac12083eff489b35d848332f0dff311131344
- https://git.kernel.org/stable/c/cc42fb40171c249bb859071d81b4eb007398a0bc
EPSS
CVE ID
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on failure in CTR_DRBG drbg_ctr_generate() sometimes returns success when it fails, leaving the output buffer uninitialized. Fix it.
A flaw was found in the Linux kernel's Cryptographic API, specifically within the Counter Mode Deterministic Random Bit Generator (CTR_DRBG). The `drbg_ctr_generate()` function can incorrectly indicate a successful operation even when it has failed. This issue results in the output buffer remaining uninitialized, potentially leading to information disclosure or unpredictable system behavior when this uninitialized data is subsequently used.
In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on failure in CTR_DRBG drbg_ctr_generate() sometimes returns success when it fails, leaving the output buffer uninitialized. Fix it.
In the Linux kernel, the following vulnerability has been resolved: c ...
EPSS