CVE-2026-19736

The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...

CVE-2026-19736

The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...

CVE-2026-19736

The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c contains an out-of-bounds write vulnerability. The root cause is the driver passing raw byte counts to the TRNG_GetRandomData() SDK routine. On i.MX RT5xx and RT6xx parts, the SDK's health test variant performs word-granular ...