{"id":"CVE-2026-80833","revision":"d51ad0c36be0493da0301ef930a5c991","records":[{"revision":"d51ad0c36be0493da0301ef930a5c991","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-80833","aliases":[],"title":"crypto: sun8i-ss - Remove crypto_rng interface","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: sun8i-ss - Remove crypto_rng interface\n\nSince the crypto_rng interface for hardware PRNGs is unused and is\nredundant with hwrng and the actual Linux RNG, it's being phased out.\nMost drivers for it were already removed.  Go ahead and remove the\nsun8i-ss support which is one of the only remaining ones.\n\nAs usual for crypto_rng, this driver was also buggy: its ->generate()\nfunction had a use-after-free vulnerability due to using\nwait_for_completion_interruptible_timeout() without handling shutting\ndown the DMA operation if a signal is sent.  Also, it had a buffer\noverread bug in the line 'memcpy(ctx->seed, d + dlen, ctx->slen);'.\nThere's no point in fixing these bugs separately only to remove the code\nanyway, so this commit is marked with Fixes and Cc stable.","state":0,"publishedAt":"2026-09-04T15:54:41.795+00:00","modifiedAt":"2026-10-19T08:44:25.619+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/crypto/allwinner/Kconfig\",\n                        \"drivers/crypto/allwinner/sun8i-ss/Makefile\",\n                        \"drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c\",\n                        \"drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c\",\n                        \"drivers/crypto/allwinner/sun8i-ss/sun8i-ss.h\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"ac2614d721dea2ff273af19c6c5d508d58a2bb3e\",\n                            \"lessThan\": \"9127d2a88c1795ddc4ba7687fea01cab1908fae1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ac2614d721dea2ff273af19c6c5d508d58a2bb3e\",\n                            \"lessThan\": \"64f3406ad082c00fb7a80240a24943ccb6d9a538\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ac2614d721dea2ff273af19c6c5d508d58a2bb3e\",\n                            \"lessThan\": \"6117968fe2cdcde28ac3aa6ec814485320af4049\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ac2614d721dea2ff273af19c6c5d508d58a2bb3e\",\n                            \"lessThan\": \"a41e4ba94ad4571aa2e566baa395e6e871e0fd4f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ac2614d721dea2ff273af19c6c5d508d58a2bb3e\",\n                            \"lessThan\": \"d29ccf9eeb67d775221e49a079caa1af83427afa\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ac2614d721dea2ff273af19c6c5d508d58a2bb3e\",\n                            \"lessThan\": \"7c257a295e05ceb8f78aa3efecc4e9ce19c3313f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ac2614d721dea2ff273af19c6c5d508d58a2bb3e\",\n                            \"lessThan\": \"8ab58786b4c63b8f1b6c522f33bb67a3c8c2791f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ac2614d721dea2ff273af19c6c5d508d58a2bb3e\",\n                            \"lessThan\": \"a78446ee6fae86ac8733f120e3ffce2e5d9384f5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/crypto/allwinner/Kconfig\",\n                        \"drivers/crypto/allwinner/sun8i-ss/Makefile\",\n                        \"drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c\",\n                        \"drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c\",\n                        \"drivers/crypto/allwinner/sun8i-ss/sun8i-ss.h\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.10\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.10\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.271\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.222\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.109\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.50\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.3\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/9127d2a88c1795ddc4ba7687fea01cab1908fae1","https://git.kernel.org/stable/c/64f3406ad082c00fb7a80240a24943ccb6d9a538","https://git.kernel.org/stable/c/6117968fe2cdcde28ac3aa6ec814485320af4049","https://git.kernel.org/stable/c/a41e4ba94ad4571aa2e566baa395e6e871e0fd4f","https://git.kernel.org/stable/c/d29ccf9eeb67d775221e49a079caa1af83427afa","https://git.kernel.org/stable/c/7c257a295e05ceb8f78aa3efecc4e9ce19c3313f","https://git.kernel.org/stable/c/8ab58786b4c63b8f1b6c522f33bb67a3c8c2791f","https://git.kernel.org/stable/c/a78446ee6fae86ac8733f120e3ffce2e5d9384f5"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80833","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-80833","identifiers":["CVE-2026-80833"]},"retained":false,"historicalAffected":[]}],"coverage":[]}