The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to "return the same value over and over again for long stretches of time."
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-smp-develUpgrade kernel-debugUpgrade kernel-xenUUpgrade kernel-xenU-develUpgrade kernel-hugememUpgrade kernel-smpUpgrade kernel-develUpgrade kernel-hugemem-develUpgrade kernel | Dec 1, 2016 | Sep 18, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 18, 2009 |
| Suse | — | Upgrade pcfclock-kmp-debugUpgrade kernel-iseries64Upgrade kernel-vmiUpgrade kernel-kdumppaeUpgrade vmware-kmp-debugUpgrade kernel-kdumpUpgrade atl2-kmp-debugUpgrade kernel-sourceUpgrade virtualbox-ose-kmp-debugUpgrade aufs-kmp-debugUpgrade drbd-kmp-debugUpgrade acerhk-kmp-debugUpgrade kernel-xenUpgrade appleir-kmp-debugUpgrade nouveau-kmp-debugUpgrade iscsitarget-kmp-debugUpgrade kernel-debugUpgrade kernel-ppc64Upgrade acx-kmp-debugUpgrade pcc-acpi-kmp-debugUpgrade kernel-symsUpgrade wlan-ng-kmp-debugUpgrade kernel-ps3Upgrade tpctl-kmp-debugUpgrade ivtv-kmp-debugUpgrade uvcvideo-kmp-debugUpgrade kernel-bigsmpUpgrade omnibook-kmp-debugUpgrade kernel-paeUpgrade kernel-defaultUpgrade kernel-docsUpgrade at76_usb-kmp-debugUpgrade dazuko-kmp-debugUpgrade kernel-vanillaUpgrade kernel-smpUpgrade kernel-vmipaeUpgrade kqemu-kmp-debugUpgrade gspcav-kmp-debugUpgrade kernel-xenpae | Feb 17, 2015 | Sep 18, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.27-15-server | Nov 8, 2024 | Sep 18, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub