CVE-2026-64306

Published: Jul 25, 2026Modified: Sep 3, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on failure in CTR_DRBG drbg_ctr_generate() sometimes returns success when it fails, leaving the output buffer uninitialized. Fix it.

Affected (8)

Products: Linux: Linux Kernel

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 3.12.44 to 3.13
Linux Linux Kernel	From 4.1 to 5.10.261
Linux Linux Kernel	From 5.11 to 5.15.212
Linux Linux Kernel	From 5.16 to 6.1.178
Linux Linux Kernel	From 6.13 to 6.18.39
Linux Linux Kernel	From 6.19 to 7.1.4
Linux Linux Kernel	From 6.2 to 6.6.145
Linux Linux Kernel	From 6.7 to 6.12.96

References (8)

https://git.kernel.org/stable/c/074db6db03a0aaa78f05ca9d4838053713796665

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/23b8b188cb32e5531d0f8d3af9506f8959cb369e

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/39a31ad9e2a5ed7e9c9c6f711dca96c8c8f5f26b

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/75597e8774f319152744d24e0683d9393540a951

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/7b03312491f9fe6ba4d60c4023e7e61d2d1fed96

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/a9e886f73dd717027028bb7e3bbca93601ecdfc7

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/bbbac12083eff489b35d848332f0dff311131344

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/cc42fb40171c249bb859071d81b4eb007398a0bc

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

Timeline

No history available yet.