What’s Vulnerable › Vulnerabilities

CVE-2025-0577: Glibc: vdso getrandom acceleration may return predictable randomness

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-18 · updated 2026-06-17
• Weakness: CWE-331

Description

An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of functions may return predictable randomness if these functions are called again after the fork, which happens concurrently with a call to any of these functions.

References

• https://access.redhat.com/security/cve/CVE-2025-0577
• https://bugzilla.redhat.com/show_bug.cgi?id=2338871

Get alerted when CVE-2025-0577 or the next vulnerability affects your stack