PT-2025-52955 · Linux · Linux Kernel
Published
2025-12-24
·
Updated
2026-03-24
·
CVE-2023-53998
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists in the virtio random number generator (rng) device when handling entropy requests and data availability. Specifically, the issue occurs when a new request is initiated at the end of a read operation, leading to a potential race between the writing of new data and the next reader due to a lack of synchronization. This can occur because the
data avail variable is not properly synchronized between the writer and the reader. The fix involves using smp store release when writing data avail and smp load acquire when reading it during the initial read operation. Redundant zeroing of data idx and data avail has also been removed.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel