https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:43:21 +0000 https://vulnerability.circl.lu/vuln/cve-2026-80833 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>crypto: sun8i-ss - Remove crypto_rng interface</p> <p>Since the crypto_rng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it&#39;s being phased out. Most drivers for it were already removed. Go ahead and remove the sun8i-ss support which is one of the only remaining ones.</p> <p>As usual for crypto_rng, this driver was also buggy: its -&gt;generate() function had a use-after-free vulnerability due to using wait_for_completion_interruptible_timeout() without handling shutting down the DMA operation if a signal is sent. Also, it had a buffer overread bug in the line &#39;memcpy(ctx-&gt;seed, d + dlen, ctx-&gt;slen);&#39;. There&#39;s no point in fixing these bugs separately only to remove the code anyway, so this commit is marked with Fixes and Cc stable.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>crypto: sun8i-ss - Remove crypto_rng interface</p> <p>Since the crypto_rng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it&#39;s being phased out. Most drivers for it were already removed. Go ahead and remove the sun8i-ss support which is one of the only remaining ones.</p> <p>As usual for crypto_rng, this driver was also buggy: its -&gt;generate() function had a use-after-free vulnerability due to using wait_for_completion_interruptible_timeout() without handling shutting down the DMA operation if a signal is sent. Also, it had a buffer overread bug in the line &#39;memcpy(ctx-&gt;seed, d + dlen, ctx-&gt;slen);&#39;. There&#39;s no point in fixing these bugs separately only to remove the code anyway, so this commit is marked with Fixes and Cc stable.</p> https://vulnerability.circl.lu/vuln/cve-2026-80833