Linux Kernel Vulnerability in Qcom-rng Random Number Generation

CVE-2026-80922

What is CVE-2026-80922?

A vulnerability exists within the Linux kernel's Qcom-rng module that improperly handles zero as a valid random number. This flaw can lead to outputs that are distinguishable from true random, undermining the integrity and security of cryptographic operations. Properly allowing zero enhances the randomness of generated numbers, making them indistinguishable from an ideal random sequence.

References