CVE-2026-80922

A flaw was found in the Linux kernel's qcom-rng cryptographic driver. This vulnerability incorrectly prevented the generation of zero as a random number. By making the output distinguishable from truly random numbers, this flaw could lead to a reduction in the entropy of the random number generator, potentially weakening cryptographic operations that rely on it.

This vulnerability is rated as Moderate impact because it subtly degrades entropy quality rather than allowing immediate arbitrary code execution or direct cryptographic key extraction. Exposure is strictly limited to systems running on Qualcomm hardware where the qcom-rng driver is actively loaded, such as specialized embedded or automotive architectures. Standard enterprise server deployments running on common hardware architectures do not utilize this driver and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.