Entropy Integrity Issue in Linux Kernel Due to Atmel SHA204A Buffer Management

CVE-2026-74402

What is CVE-2026-74402?

A vulnerability in the Linux kernel related to the Atmel SHA204A device has been identified, where both blocking and non-blocking random number generation logic failed to produce valid entropy due to improper buffer management. This flaw led to a situation where reading from the buffer, beginning at byte 1, only retrieved minimal random data, which undermined the cryptographic integrity of systems leveraging this hardware. The issue was resolved through enhanced buffer management, ensuring that random data can be accurately fetched and utilized.

References