PT-2020-5987 · Linux+6 · Linux Kernel+6
Published
2020-07-29
·
Updated
2022-04-26
·
CVE-2020-16166
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.7.11
Description
The issue is related to the Linux kernel's random number generator (RNG) and is caused by a lack of protection for internal data. This allows remote attackers to make observations that help obtain sensitive information about the internal state of the network RNG. The affected files are drivers/char/random.c and kernel/time/timer.c.
Recommendations
For Linux kernel versions through 5.7.11, update to a version later than 5.7.11 to resolve the issue.
As a temporary workaround, consider restricting access to the affected files, drivers/char/random.c and kernel/time/timer.c, until a patch is available.
Fix
Use of Insufficiently Random Values
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu