The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 1 Views

Linux kernel up to 5.7.11 lets remote attackers observe internal RNG state CID-f227e3ec3b5c.

Reporter	Title	Published	Views	Family All 316
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	19 May 202109:52	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE 2020-16166	2 Dec 202122:54	–	ibm
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-014)	2 May 202200:00	–	nessus
Tenable Nessus	CentOS 7 : kernel-alt (RHSA-2020:4279)	9 Oct 202400:00	–	nessus
Tenable Nessus	Debian DLA-2385-1 : linux-4.19 security update	29 Sep 202000:00	–	nessus
Tenable Nessus	Debian DLA-2420-2 : linux regression update	2 Nov 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1859)	28 Aug 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2020-1958)	8 Sep 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2020-2011)	29 Sep 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : kernel (EulerOS-SA-2020-2150)	28 Sep 202000:00	–	nessus

Vulners

Node

microsoft cm1_kernel_5.4.91-3Range<5.4.91-3

18 Aug 2020 07:00Current

7High risk

Vulners AI Score7

CVSS 3.13.7

CVSS 24.3

EPSS0.05271

linux kernel remote attackers random number state cid-f227e3ec3b5c