CVE-2026-80922 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/143c74034a1c47b0a1a64e7ca7153e7739bd1244
https://git.kernel.org/stable/c/3c7101cfc52e378bcb0a46962145e39c9051dd5d
https://git.kernel.org/stable/c/4c0018320942003bfedd0a1c4cce3f036d363a7f
https://git.kernel.org/stable/c/4ef04bdc0c9f98836d1638be516f6bf1bad55f69
https://git.kernel.org/stable/c/813e6718a199befc4f26f54bdd899fbfa11515e5

History

Wed, 09 Sep 2026 18:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-332

Wed, 09 Sep 2026 16:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random.
Title		crypto: qcom-rng - Allow zero as a random number
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/143c74034a1c47b0a1a64e7ca7153e7739bd1244 https://git.kernel.org/stable/c/3c7101cfc52e378bcb0a46962145e39c9051dd5d https://git.kernel.org/stable/c/4c0018320942003bfedd0a1c4cce3f036d363a7f https://git.kernel.org/stable/c/4ef04bdc0c9f98836d1638be516f6bf1bad55f69 https://git.kernel.org/stable/c/813e6718a199befc4f26f54bdd899fbfa11515e5

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-09T16:19:42.937Z

Updated: 2026-09-09T16:19:42.937Z

Reserved: 2026-08-26T14:34:25.801Z

Link: CVE-2026-80922

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-09T17:17:47.383

Modified: 2026-09-09T17:17:47.383

Link: CVE-2026-80922

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-80922", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-26T14:34:25.801Z", "datePublished": "2026-09-09T16:19:42.937Z", "dateUpdated": "2026-09-09T16:19:42.937Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-09T16:19:42.937Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qcom-rng - Allow zero as a random number\n\nZero is a valid random number and needs to be allowed. Otherwise the\noutput is distinguishable from random."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/qcom-rng.c"], "versions": [{"version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "lessThan": "813e6718a199befc4f26f54bdd899fbfa11515e5", "status": "affected", "versionType": "git"}, {"version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "lessThan": "4c0018320942003bfedd0a1c4cce3f036d363a7f", "status": "affected", "versionType": "git"}, {"version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "lessThan": "143c74034a1c47b0a1a64e7ca7153e7739bd1244", "status": "affected", "versionType": "git"}, {"version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "lessThan": "3c7101cfc52e378bcb0a46962145e39c9051dd5d", "status": "affected", "versionType": "git"}, {"version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "lessThan": "4ef04bdc0c9f98836d1638be516f6bf1bad55f69", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/qcom-rng.c"], "versions": [{"version": "6.7", "status": "affected"}, {"version": "0", "lessThan": "6.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.108", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.49", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.13", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.3", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.12.108"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "6.18.49"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.1.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.2.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/813e6718a199befc4f26f54bdd899fbfa11515e5"}, {"url": "https://git.kernel.org/stable/c/4c0018320942003bfedd0a1c4cce3f036d363a7f"}, {"url": "https://git.kernel.org/stable/c/143c74034a1c47b0a1a64e7ca7153e7739bd1244"}, {"url": "https://git.kernel.org/stable/c/3c7101cfc52e378bcb0a46962145e39c9051dd5d"}, {"url": "https://git.kernel.org/stable/c/4ef04bdc0c9f98836d1638be516f6bf1bad55f69"}], "title": "crypto: qcom-rng - Allow zero as a random number", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/crypto/qcom-rng.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "813e6718a199befc4f26f54bdd899fbfa11515e5", "status": "affected", "version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "versionType": "git"}, {"lessThan": "4c0018320942003bfedd0a1c4cce3f036d363a7f", "status": "affected", "version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "versionType": "git"}, {"lessThan": "143c74034a1c47b0a1a64e7ca7153e7739bd1244", "status": "affected", "version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "versionType": "git"}, {"lessThan": "3c7101cfc52e378bcb0a46962145e39c9051dd5d", "status": "affected", "version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "versionType": "git"}, {"lessThan": "4ef04bdc0c9f98836d1638be516f6bf1bad55f69", "status": "affected", "version": "f29cd5bb64c258f29b4c49452532481f50eb43ca", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/crypto/qcom-rng.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.7"}, {"lessThan": "6.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.108", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.49", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.13", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.3", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qcom-rng - Allow zero as a random number\n\nZero is a valid random number and needs to be allowed. Otherwise the\noutput is distinguishable from random."}], "id": "CVE-2026-80922", "lastModified": "2026-09-09T17:17:47.383", "metrics": {}, "published": "2026-09-09T17:17:47.383", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/143c74034a1c47b0a1a64e7ca7153e7739bd1244"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3c7101cfc52e378bcb0a46962145e39c9051dd5d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4c0018320942003bfedd0a1c4cce3f036d363a7f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4ef04bdc0c9f98836d1638be516f6bf1bad55f69"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/813e6718a199befc4f26f54bdd899fbfa11515e5"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}