CVE-2025-68313 — Use of Cryptographically Weak Pseudo-Random Number Generator in Linux
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
x86/CPU/AMD: Add RDSEED fix for Zen5
There's an issue with RDSEED's 16-bit and 32-bit register output
variants on Zen5 which return a random value of 0 "at a rate inconsistent
with randomness while incorrectly signaling success (CF=1)". Search the
web for AMD-SB-7055 for more detail.
Add a fix glue which checks microcode revisions.
[ bp: Add microcode revisions checking, rewrite. ]
Affected Packages6 packages
▶CVEListV5linux/linux3e4147f33f8b647775357bae0248b9a2aeebfcd2 — e980de2ff109dacb6d9d3a77f01b27c467115ecb+3