CVE-2026-25835
published 2026-04-01CVE-2026-25835: Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
PriorityP337high7.7CVSS 3.1
AVLACLPRNUINSUCHIHAN
EPSS
0.17%
6.7th percentile
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arm | mbed_tls | >= 2.18.0 < 3.6.6 | 3.6.6 |
| debian | mbedtls | — | — |
| trustedfirmware | mbed_tls | — | — |
| trustedfirmware | tf-psa-crypto | < 1.1.0 | 1.1.0 |
CVSS provenance
nvdv3.17.7HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
osv7.7HIGH
vendor_debian7.7HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2026-25835: mbedtls - Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Ra...
vendor_debian·2026·CVSS 7.7
CVE-2026-25835 [HIGH] CVE-2026-25835: mbedtls - Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Ra...
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
OSV
CVE-2026-25835: (Mbed TLS before 3
osv·2026-04-02·CVSS 7.7
CVE-2026-25835 [HIGH] CVE-2026-25835: (Mbed TLS before 3
(Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a ...)
GHSA
GHSA-76mm-6xm9-hwpx: Mbed TLS before 3
ghsa_unreviewed·2026-04-01
CVE-2026-25835 [HIGH] CWE-335 GHSA-76mm-6xm9-hwpx: Mbed TLS before 3
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
OSV
CVE-2026-25835: Mbed TLS before 3
osv·2026-04-01·CVSS 7.7
CVE-2026-25835 [HIGH] CVE-2026-25835: Mbed TLS before 3
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-25835 rust-psa-crypto-sys: PSA random generator cloning [fedora-all]
bugzilla·2026-04-01·CVSS 7.7
CVE-2026-25835 [HIGH] CVE-2026-25835 rust-psa-crypto-sys: PSA random generator cloning [fedora-all]
CVE-2026-25835 rust-psa-crypto-sys: PSA random generator cloning [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.
---
This package is not present in any active branch of Fedora.
Bugzilla
CVE-2026-25835 micropython: PSA random generator cloning [fedora-all]
bugzilla·2026-04-01·CVSS 7.7
CVE-2026-25835 [HIGH] CVE-2026-25835 micropython: PSA random generator cloning [fedora-all]
CVE-2026-25835 micropython: PSA random generator cloning [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This is an mbedtls CVE manifested when forking but embedded ports do not fork and the unix port does not fork after TLS initialization.
Bugzilla
CVE-2026-25835 mbedtls: PSA random generator cloning [fedora-all]
bugzilla·2026-04-01·CVSS 7.7
CVE-2026-25835 [HIGH] CVE-2026-25835 mbedtls: PSA random generator cloning [fedora-all]
CVE-2026-25835 mbedtls: PSA random generator cloning [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
FEDORA-2026-10443c65e3 (mbedtls-3.6.6-1.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-10443c65e3
---
FEDORA-2026-3a9536df40 (mbedtls-3.6.6-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-3a9536df40
---
FEDORA-2026-8c332fbf00 (mbedtls-3.6.6-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-8c332fbf00
---
FEDORA-2026-
Bugzilla
CVE-2026-25835 mbedtls: PSA random generator cloning [epel-all]
bugzilla·2026-04-01·CVSS 7.7
CVE-2026-25835 [HIGH] CVE-2026-25835 mbedtls: PSA random generator cloning [epel-all]
CVE-2026-25835 mbedtls: PSA random generator cloning [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
FEDORA-EPEL-2026-479c1d4133 (mbedtls-3.6.6-1.el10_1) has been submitted as an update to Fedora EPEL 10.1.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-479c1d4133
---
FEDORA-EPEL-2026-ba79b9dff1 (mbedtls-3.6.6-1.el10_2) has been submitted as an update to Fedora EPEL 10.2.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ba79b9dff1
---
FEDORA-EPEL-2026-59a9d512a4 (mbedtls-3.6.6-1.el10_3) has been submitted as an update to Fedora EPEL 10.3.
https://bodhi.fedoraproject.org
Wiz
CVE-2026-25835 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.1
CVE-2026-25835 [MEDIUM] CVE-2026-25835 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-25835 :
Mbed TLS vulnerability analysis and mitigation
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).
Source : NVD
## 7.7
Score
Published April 1, 2026
Severity HIGH
CNA Score 7.7
Affected Technologies
Mbed TLS
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 2.7
Exploitation Probability (EPSS) N/A
Affected packages and libraries
cpe:2.3:a:arm:mbed_tls
mbedtls
Sources
Alpine 3.20, 3.21, 3.22, 3.23, edge Severity HIGH Has Fix Added at: Apr 02, 2026
Debian 11, 12, 13, 14 Severity HIGH No Fix Added at: Apr 05, 2026
Echo Severity HIGH No Fix Added at: Apr 05, 2026
Linux Severity HIGH Has Fix Added at: Apr 06
2026-04-01
Published