CVE-2026-93163None▾ Sunlit

In the Linux kernel, the following vulnerability has been resolved: hwrng: core - fix rng list on registration error hwrng_register(rng) does the following: 1

In the Linux kernel, the following vulnerability has been resolved: hwrng: core - fix rng list on registration error hwrng_register(rng) does the following: 1. Checks if rng has name and read methods set 2. Checks if the name already …

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score3/ 100 · Minimal

impact 2.8 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Sep 17, 2026

Updated

Sep 17, 2026

CVSS

—

Vendor

Linux

Product

Linux

CWE

—

Depth score

3 · Minimal

EPSS

0.21% · p11

Platforms

—

Source

NVD

Vector

—

EPSS history

Exploit-prediction probability, daily snapshots since Sep 19.

0.2% → 0.2%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 8 days

Sep 17, 2026Published
Disclosed via NVD
Sep 19, 2026EPSS first tracked
0.2%
Sep 25, 2026EPSS peak
0.2% → 0.2%

Linux #nvd #cve.org

Affected

Linux >= 2bbb6983887fefc8026beab01198d30f47b7bd22 < de4f1bcb61a73cc896decdbd27d61a34add93b53
Linux >= 2bbb6983887fefc8026beab01198d30f47b7bd22 < cf293c9c7424de0d04b51367d07f40570ce80231
Linux >= 2bbb6983887fefc8026beab01198d30f47b7bd22 < bee8d1fcdc8f389b595b0a4cf6fe8440f499458a
Linux >= 2bbb6983887fefc8026beab01198d30f47b7bd22 < 3a5834db2b1ce25649f330e78efe1ccde78967fd
Linux 42802952a2725f85f7e36ee3b29593af5fe87197
Linux >= 4.9.320 < 4.10
Linux 4.14

Full technical detail▾

Overview

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - fix rng list on registration error

hwrng_register(rng) does the following:

Checks if rng has name and read methods set
Checks if the name already exists
Adds rng to global rng_list
May try to set rng to current_rng

If step 4 fails, it returns an error. However, it does not remove the rng from rng_list, causing a dangling reference which can result in use-after-free if the caller frees rng, since registration failed.

Add a list_del_init() cleanup step.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org

← Back to feed

CVE-2026-93163None▾ Sunlit

In the Linux kernel, the following vulnerability has been resolved: hwrng: core - fix rng list on registration error hwrng_register(rng) does the following: 1

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score3/ 100 · Minimal

impact 2.8 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Sep 17, 2026

Updated

Sep 17, 2026

CVSS

—

Vendor

Linux

Product

Linux

CWE

—

Depth score

3 · Minimal

EPSS

0.21% · p11

Platforms

—

Source

NVD

Vector

—

EPSS history

Exploit-prediction probability, daily snapshots since Sep 19.

0.2% → 0.2%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 8 days

Sep 17, 2026Published
Disclosed via NVD
Sep 19, 2026EPSS first tracked
0.2%
Sep 25, 2026EPSS peak
0.2% → 0.2%

Linux #nvd #cve.org

Affected

Linux >= 2bbb6983887fefc8026beab01198d30f47b7bd22 < de4f1bcb61a73cc896decdbd27d61a34add93b53
Linux >= 2bbb6983887fefc8026beab01198d30f47b7bd22 < cf293c9c7424de0d04b51367d07f40570ce80231
Linux >= 2bbb6983887fefc8026beab01198d30f47b7bd22 < bee8d1fcdc8f389b595b0a4cf6fe8440f499458a
Linux >= 2bbb6983887fefc8026beab01198d30f47b7bd22 < 3a5834db2b1ce25649f330e78efe1ccde78967fd
Linux 42802952a2725f85f7e36ee3b29593af5fe87197
Linux >= 4.9.320 < 4.10
Linux 4.14

Full technical detail▾

Overview

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - fix rng list on registration error

hwrng_register(rng) does the following:

Checks if rng has name and read methods set
Checks if the name already exists
Adds rng to global rng_list
May try to set rng to current_rng

Add a list_del_init() cleanup step.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org