CVE-2026-80922: crypto: qcom-rng - Allow zero as a random number
Published Sep 9, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
crypto: qcom-rng - Allow zero as a random number
Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random.
Affected Software
1 affected component
Linux Linux kernel
Event History
Sep 9, 2026
CVE Published
via MITRE·04:19 PM
Data Sourced
via MITRE·04:19 PM
Description
Frequently Asked Questions
1
Which systems are affected by this issue?
The issue applies to Linux kernel systems using the Qualcomm RNG driver (qcom-rng). The provided data does not identify specific kernel versions or affected device models.
2
What is the security impact of rejecting zero output?
Zero is a valid random value. Rejecting it makes the RNG output distinguishable from truly random output, weakening the expected randomness properties.
3
What is the remediation?
Apply a Linux kernel update containing the qcom-rng fix referenced in the provided stable kernel commits. The available data does not provide a workaround for systems that cannot be updated immediately.