Back to CVE records
Not yet scoredPublished Sep 9, 2026
CVE-2026-80922crypto: qcom-rng - Allow zero as a random number
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 9, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f29cd5bb64c258f29b4c49452532481f50eb43ca before 813e6718a199befc4f26f54bdd899fbfa11515e5; from f29cd5bb64c258f29b4c49452532481f50eb43ca before 4c0018320942003bfedd0a1c4cce3f036d363a7f; from f29cd5bb64c258f29b4c49452532481f50eb43ca before 143c74034a1c47b0a1a64e7ca7153e7739bd1244; from f29cd5bb64c258f29b4c49452532481f50eb43ca before 3c7101cfc52e378bcb0a46962145e39c9051dd5d; from f29cd5bb64c258f29b4c49452532481f50eb43ca before 4ef04bdc0c9f98836d1638be516f6bf1bad55f69 | CNA record |
References
- https://git.kernel.org/stable/c/813e6718a199befc4f26f54bdd899fbfa11515e5
- https://git.kernel.org/stable/c/4c0018320942003bfedd0a1c4cce3f036d363a7f
- https://git.kernel.org/stable/c/143c74034a1c47b0a1a64e7ca7153e7739bd1244
- https://git.kernel.org/stable/c/3c7101cfc52e378bcb0a46962145e39c9051dd5d
- https://git.kernel.org/stable/c/4ef04bdc0c9f98836d1638be516f6bf1bad55f69
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.