CVE-2026-80871

    Dashboard / Vulnerabilities / CVE-2026-80871

    CVE-2026-80871

    Published: 4 Sept 2026Last Modified: 6 Sept 2026

    Summary: crypto: xilinx-trng - Remove crypto_rng interface

    Details: In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove crypto_rng interface Implementing the crypto_rng interface has no purpose, as it isn't used in practice. It's being removed from other drivers too. Just remove it. This leaves hwrng, which is actually used. Tagging with 'Cc stable' due to the bugs that this removes: - xtrng_trng_generate() sometimes returned success even when it didn't fill in all the bytes. - It was possible for xtrng_trng_generate() and xtrng_hwrng_trng_read() to run concurrently and interfere with each other, as the locking code in xtrng_hwrng_trng_read() was broken.

    References: https://git.kernel.org/stable/c/32b4d29280ed2a991dc196d5845b892acedc63b8, https://git.kernel.org/stable/c/83f29da85dc9d9a32fe62cd1055e8e6705e6bf80, https://git.kernel.org/stable/c/9634db561e1594c151923f4950c012161c545c93, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80871.json, https://nvd.nist.gov/vuln/detail/CVE-2026-80871, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8979744aca8096ee5072798dfc1181606919b35d
    Fixed -83f29da85dc9d9a32fe62cd1055e8e6705e6bf80

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-80871 | CVE-DB