Linux Kernel Vulnerability in Qualcomm RNG Implementation

CVE-2026-80835

What is CVE-2026-80835?

In the Linux kernel, a flaw within the Qualcomm RNG implementation allows the crypto_rng and hwrng interfaces to operate concurrently, leading to potential generation of non-random values and repetition of RNG outputs. This design oversight complicates the RNG process and could result in unreliable random number generation. The crypto_rng interface, being unnecessary for practical applications, has been removed to enhance code simplicity and avoid future conflicts with the active hwrng interface.

References