Vulnerability in Linux Kernel's sun8i-ss Support Affects Security Operations

CVE-2026-80833

What is CVE-2026-80833?

The vulnerability within the Linux kernel relates to the phased removal of the unused crypto_rng interface for hardware PRNGs, specifically impacting the sun8i-ss support. The driver exhibited critical weaknesses, including a use-after-free flaw arising from improper handling during DMA operation shutdown, and a buffer overread issue potentially leading to data leakage. Given its obsolescence, the decision was made to remove the driver entirely, consolidating security efforts while eliminating unnecessary risks from the codebase.

References