CVE-2026-93159
CVE CVE-2026-93159EUVD EUVD-2026-82267Published 2026-09-17T16:11:53.000Z
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a work_data structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng->priv and later consumed by the read path once the transaction completes. If the underlying I2C transfer fails, the completion callback is invoked with a non-zero status. In this case, the allocated work_data is not usable for producing RNG output and must not remain associated with the hwrng state. Previously, the failure path only logged a warning but left the pointer state uncleared, which can result in subsequent read attempts observing stale state and interpreting it as valid completion data. Fix this by freeing the pending work_data. The I2C transaction reports an error. This ensures that failed requests do not leave residual state behind that could be interpreted as valid RNG data on later reads. Clearing rng->priv is done at the subsequent call to nonblocking read.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux patch: 7.2.6; da001fb651b00e1deeaf24767dd691ae8152a4f5 <72bbf11ba14bd7d5fbf31a1ec42fff608b657f74; patch: 0; da001fb651b00e1deeaf24767dd691ae8152a4f5 <4e76d85e505b7451925efbcd67c015e8c2440c68; patch: 6.6.157; patch: 7.3-rc1; da001fb651b00e1deeaf24767dd691ae8152a4f5 <28cc179252347718f97045dd5ea74165609dbd7d; patch: 6.12.110; 5.3; da001fb651b00e1deeaf24767dd691ae8152a4f5 <bcac9052e19490231ff6e0678a06bd2fcf8db3af; da001fb651b00e1deeaf24767dd691ae8152a4f5 <0d6db386133d9230befb77967bbf130443964860; patch: 6.18.52; da001fb651b00e1deeaf24767dd691ae8152a4f5 <a430b5b6d2ddd2b266330f8507a655be1148347d; patch: 5.10.270; da001fb651b00e1deeaf24767dd691ae8152a4f5 <f4d347fb1309b69ea6f817a17e6b2893c8d754b7; patch: 5.15.221; da001fb651b00e1deeaf24767dd691ae8152a4f5 <94abda77b57a35b82bba0365bad072d94d67ffe9; patch: 6.1.188
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.