Linux Kernel Vulnerability Affecting Sun8i-ce Crypto RNG Interface

CVE-2026-80834

What is CVE-2026-80834?

A vulnerability in the Linux kernel's sun8i-ce crypto RNG interface has been identified and resolved. This interface, used for hardware pseudo-random number generation (PRNG), was deemed redundant due to the existing hwrng and the primary Linux RNG. The sun8i-ce driver had a notable use-after-free flaw in its generate() function stemming from improper handling of DMA shutdown during signals. While resolving the issue, the decision was made to remove the cryptographically obsolete interface entirely due to its lack of use and the broader context of removal of most relevant drivers.

References