CVE-2026-64306

5.5 Moyenne

Publiée le 25/07/2026 à 12:17 · Modifiée le 03/09/2026 à 18:06 · Analysée par le NVD · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on failure in CTR_DRBG drbg_ctr_generate() sometimes returns success when it fails, leaving the output buffer uninitialized. Fix it.

Traduire en français

Produits concernés

Linux
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.5 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Références

https://git.kernel.org/stable/c/074db6db03a0aaa78f05ca9d4838053713796665 Patch
https://git.kernel.org/stable/c/23b8b188cb32e5531d0f8d3af9506f8959cb369e Patch
https://git.kernel.org/stable/c/39a31ad9e2a5ed7e9c9c6f711dca96c8c8f5f26b Patch
https://git.kernel.org/stable/c/75597e8774f319152744d24e0683d9393540a951 Patch
https://git.kernel.org/stable/c/7b03312491f9fe6ba4d60c4023e7e61d2d1fed96 Patch
https://git.kernel.org/stable/c/a9e886f73dd717027028bb7e3bbca93601ecdfc7 Patch
https://git.kernel.org/stable/c/bbbac12083eff489b35d848332f0dff311131344 Patch
https://git.kernel.org/stable/c/cc42fb40171c249bb859071d81b4eb007398a0bc Patch

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories