-

CVE-2026-64306

crypto: drbg - Fix returning success on failure in CTR_DRBG

In the Linux kernel, the following vulnerability has been resolved:

crypto: drbg - Fix returning success on failure in CTR_DRBG

drbg_ctr_generate() sometimes returns success when it fails, leaving the
output buffer uninitialized.  Fix it.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version cde001e4c3c3625c60b68a83eb1f1c2572dee07a
Version < 074db6db03a0aaa78f05ca9d4838053713796665
Status affected
Version cde001e4c3c3625c60b68a83eb1f1c2572dee07a
Version < 7b03312491f9fe6ba4d60c4023e7e61d2d1fed96
Status affected
Version cde001e4c3c3625c60b68a83eb1f1c2572dee07a
Version < 75597e8774f319152744d24e0683d9393540a951
Status affected
Version cde001e4c3c3625c60b68a83eb1f1c2572dee07a
Version < cc42fb40171c249bb859071d81b4eb007398a0bc
Status affected
Version cde001e4c3c3625c60b68a83eb1f1c2572dee07a
Version < bbbac12083eff489b35d848332f0dff311131344
Status affected
Version cde001e4c3c3625c60b68a83eb1f1c2572dee07a
Version < 23b8b188cb32e5531d0f8d3af9506f8959cb369e
Status affected
Version cde001e4c3c3625c60b68a83eb1f1c2572dee07a
Version < a9e886f73dd717027028bb7e3bbca93601ecdfc7
Status affected
Version cde001e4c3c3625c60b68a83eb1f1c2572dee07a
Version < 39a31ad9e2a5ed7e9c9c6f711dca96c8c8f5f26b
Status affected
Version f60b0fa8bbddde66f1d197be07120264b555c84a
Status affected
Version 3.12.44
Version < 3.13
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.1
Status affected
Version 0
Version < 4.1
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.114
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/074db6db03a0aaa78f05ca9d4838053713796665
https://git.kernel.org/stable/c/7b03312491f9fe6ba4d60c4023e7e61d2d1fed96
https://git.kernel.org/stable/c/75597e8774f319152744d24e0683d9393540a951
https://git.kernel.org/stable/c/cc42fb40171c249bb859071d81b4eb007398a0bc
https://git.kernel.org/stable/c/bbbac12083eff489b35d848332f0dff311131344
https://git.kernel.org/stable/c/23b8b188cb32e5531d0f8d3af9506f8959cb369e
https://git.kernel.org/stable/c/a9e886f73dd717027028bb7e3bbca93601ecdfc7
https://git.kernel.org/stable/c/39a31ad9e2a5ed7e9c9c6f711dca96c8c8f5f26b