Back
CVE-2026-80922crypto: qcom-rng - Allow zero as a random number
- —Not scoredno CVSS score yet
- 0.16%Exploitation in 30 daysEPSS · top 95% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random.
Timeline
ID reserved
By Linux
- 14 days later
· 14 days later
Published
- 40 days later
· 40 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.16% · top 95% of all CVEs (12 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected f29cd5bb64c258f29b4c49452532481f50eb43ca – < 813e6718a199befc4f26f54bdd899fbfa11515e5
- affected f29cd5bb64c258f29b4c49452532481f50eb43ca – < 4c0018320942003bfedd0a1c4cce3f036d363a7f
- affected f29cd5bb64c258f29b4c49452532481f50eb43ca – < 143c74034a1c47b0a1a64e7ca7153e7739bd1244
- affected f29cd5bb64c258f29b4c49452532481f50eb43ca – < 3c7101cfc52e378bcb0a46962145e39c9051dd5d
- affected f29cd5bb64c258f29b4c49452532481f50eb43ca – < 4ef04bdc0c9f98836d1638be516f6bf1bad55f69
- affected 6.7
- unaffected < 6.7
- unaffected 6.12.108 – ≤ 6.12.*
- unaffected 6.18.49 – ≤ 6.18.*
- unaffected 7.1.13 – ≤ 7.1.*
- unaffected 7.2.3 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References5
- https://git.kernel.org/stable/c/813e6718a199befc4f26f54bdd899fbfa11515e5 (opens in a new tab)
- https://git.kernel.org/stable/c/4c0018320942003bfedd0a1c4cce3f036d363a7f (opens in a new tab)
- https://git.kernel.org/stable/c/143c74034a1c47b0a1a64e7ca7153e7739bd1244 (opens in a new tab)
- https://git.kernel.org/stable/c/3c7101cfc52e378bcb0a46962145e39c9051dd5d (opens in a new tab)
- https://git.kernel.org/stable/c/4ef04bdc0c9f98836d1638be516f6bf1bad55f69 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-75099 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-80922)Record last updated .