What’s Vulnerable › Vulnerabilities

CVE-2026-80871: crypto: xilinx-trng - Remove crypto_rng interface

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-04 · updated 2026-09-04

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove crypto_rng interface Implementing the crypto_rng interface has no purpose, as it isn't used in practice. It's being removed from other drivers too. Just remove it. This leaves hwrng, which is actually used. Tagging with 'Cc stable' due to the bugs that this removes: - xtrng_trng_generate() sometimes returned success even when it didn't fill in all the bytes. - It was possible for xtrng_trng_generate() and xtrng_hwrng_trng_read() to run concurrently and interfere with each other, as the locking code in xtrng_hwrng_trng_read() was broken.

Affected products

• Linux kernel: 6.18 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/32b4d29280ed2a991dc196d5845b892acedc63b8
• https://git.kernel.org/stable/c/83f29da85dc9d9a32fe62cd1055e8e6705e6bf80
• https://git.kernel.org/stable/c/9634db561e1594c151923f4950c012161c545c93

Get alerted when CVE-2026-80871 or the next vulnerability affects your stack