CVE-2025-0577
Glibc: vdso getrandom acceleration may return predictable randomness
- State
- Published
- Severity
- 4.8 Medium
- Published
- Feb 18, 2026
- Updated
- Feb 25, 2026
- Reserved
- Jan 19, 2025
Description
An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of functions may return predictable randomness if these functions are called again after the fork, which happens concurrently with a call to any of these functions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.8 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N | fedora |
Weaknesses
- CWE-331 Insufficient Entropy
Affected Products
| Product | Versions |
|---|---|
glibc |
|
Red Hat Enterprise Linux 10Red Hat | |
Red Hat Enterprise Linux 6Red Hat | |
Red Hat Enterprise Linux 7Red Hat | |
Red Hat Enterprise Linux 8Red Hat | |
Red Hat Enterprise Linux 9Red Hat |
References
- https://access.redhat.com/security/cve/CVE-2025-0577vdb-entry
- RHBZ#2338871issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.