Interface Vulnerability in Xilinx's Crypto Module for Linux Kernel

CVE-2026-80871

What is CVE-2026-80871?

The vulnerability in Xilinx's cryptographic module for the Linux kernel relates to the unnecessary implementation of the crypto_rng interface, which was found to be unused in practice. The removal of this interface addresses multiple issues, including the potential for xtrng_trng_generate() to incorrectly report success when it failed to fill the byte buffer and the risk of concurrency issues between xtrng_trng_generate() and xtrng_hwrng_trng_read() due to flawed locking mechanisms. This action ensures that system integrity regarding random number generation is preserved by relying on the proper functioning of the hwrng interface.

References