CVE-2020-16166

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.7.11

Description The issue is related to the Linux kernel's random number generator (RNG) and is caused by a lack of protection for internal data. This allows remote attackers to make observations that help obtain sensitive information about the internal state of the network RNG. The affected files are drivers/char/random.c and kernel/time/timer.c.

Recommendations For Linux kernel versions through 5.7.11, update to a version later than 5.7.11 to resolve the issue. As a temporary workaround, consider restricting access to the affected files, drivers/char/random.c and kernel/time/timer.c, until a patch is available.