https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:36:21 +0000 https://vulnerability.circl.lu/vuln/cve-2026-93163 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>hwrng: core - fix rng list on registration error</p> <p>hwrng_register(rng) does the following:</p> <p>1. Checks if rng has name and read methods set 2. Checks if the name already exists 3. Adds rng to global rng_list 4. May try to set rng to current_rng</p> <p>If step 4 fails, it returns an error. However, it does not remove the rng from rng_list, causing a dangling reference which can result in use-after-free if the caller frees rng, since registration failed.</p> <p>Add a list_del_init() cleanup step.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>hwrng: core - fix rng list on registration error</p> <p>hwrng_register(rng) does the following:</p> <p>1. Checks if rng has name and read methods set 2. Checks if the name already exists 3. Adds rng to global rng_list 4. May try to set rng to current_rng</p> <p>If step 4 fails, it returns an error. However, it does not remove the rng from rng_list, causing a dangling reference which can result in use-after-free if the caller frees rng, since registration failed.</p> <p>Add a list_del_init() cleanup step.</p> https://vulnerability.circl.lu/vuln/cve-2026-93163