CVE-2026-93157

A flaw was found in the xilinx-trng hardware random number generator (HWRNG) driver in the Linux kernel. The xtrng_readblock32() function can incorrectly indicate a successful read even when a timeout occurs and no random data has been produced. This can result in the kernel processing incomplete or zero-byte data as valid random output. The consequence is that systems relying on this driver may utilize random numbers of compromised quality, potentially impacting the security of cryptographic operations or other functions dependent on true random data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.