CVE-2026-74438

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The sun4i ss rng component contains multiple security flaws. The function sun4i ss prng seed() lacks proper locking and is susceptible to a buffer overflow. Additionally, the sun4i ss prng generate() function fails to populate the entire buffer with cryptographic random bytes because it rounds the destination length down and does not verify if the hardware is ready before retrieving bytes.

Recommendations As a temporary workaround, restrict the use of the rng algorithm type of AF ALG to minimize the risk of exploitation.