CVE-2026-64306
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: drbg - Fix returning success on failure in CTR_DRBG drbg_ctr_generate() sometimes returns success when it fails, leaving the output buffer uninitialized. Fix it.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedJul 25, 2026
First seenJul 25, 2026
How to fix
Update
- linux linux_kernel3.13, 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.96, 6.18.39, 7.1.4 or later
Patches
- git.kernel.org/stable/c/074db6db03a0aaa78f05ca9d4838053713796665
- git.kernel.org/stable/c/23b8b188cb32e5531d0f8d3af9506f8959cb369e
- git.kernel.org/stable/c/39a31ad9e2a5ed7e9c9c6f711dca96c8c8f5f26b
- git.kernel.org/stable/c/75597e8774f319152744d24e0683d9393540a951
- git.kernel.org/stable/c/7b03312491f9fe6ba4d60c4023e7e61d2d1fed96
- git.kernel.org/stable/c/a9e886f73dd717027028bb7e3bbca93601ecdfc7
- git.kernel.org/stable/c/bbbac12083eff489b35d848332f0dff311131344
- git.kernel.org/stable/c/cc42fb40171c249bb859071d81b4eb007398a0bc
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 3.12.44 ≤ v < 3.13, 4.1 ≤ v < 5.10.261, 5.11 ≤ v < 5.15.212, 5.16 ≤ v < 6.1.178, 6.2 ≤ v < 6.6.145, 6.7 ≤ v < 6.12.96, 6.13 ≤ v < 6.18.39, 6.19 ≤ v < 7.1.4 | 3.13, 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.96, 6.18.39, 7.1.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.