43 matches found
CVE-2026-93157
A flaw was found in the xilinx-trng hardware random number generator HWRNG driver in the Linux kernel. The xtrngreadblock32 function can incorrectly indicate a successful read even when a timeout occurs and no random data has been produced. This can result in the kernel processing incomplete or...
CVE-2026-19736
The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...
CVE-2026-19736 Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths
The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...
CVE-2026-19736 Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths
The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...
EUVD-2026-97115
The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...
CVE-2026-19736
The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c contains an out-of-bounds write vulnerability. The root cause is the driver passing raw byte counts to the TRNG_GetRandomData() SDK routine. On i.MX RT5xx and RT6xx parts, the SDK's health test variant performs word-granular ...
CVE-2026-19736 Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths
The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...
CVE-2026-19736
The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...
CVE-2026-19736: Out-of-bounds Write
The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...
PT-2026-110223
The NXP MCUX TRNG entropy driver in drivers/entropy/entropy mcux trng.c passed the caller's byte count straight to the vendor SDK routine TRNG GetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNG SW HEALTH TESTS variant, which always copies whole 32-bit words and draws entropy...
SUSE CVE-2026-93157
In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...
Linux Distros Unpatched Vulnerability : CVE-2026-93157
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the firs...
CVE-2026-93157
In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...
DEBIAN-CVE-2026-93157
In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...
CVE-2026-93157 hwrng: xilinx-trng - propagate timeout before any data is read
In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...
CVE-2026-93157 hwrng: xilinx-trng - propagate timeout before any data is read
In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...
EUVD-2026-82265
In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...
CVE-2026-93157
CVE-2026-93157 affects the xilinx-trng hardware random number generator driver in the Linux kernel . The root cause is in xtrng_readblock32(), which polls for 16-byte chunks but returns the byte count even when the first poll times out. The caller then treats a zero return as a short successful r...
CVE-2026-93157: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...
PT-2026-94953
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xilinx-trng hardware random number generator where the xtrng readblock32 function fails to properly propagate a timeout when no data has been read. The function...