CVE-2026-93163

hwrng: core - fix rng list on registration error

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - fix rng list on registration error

hwrng_register(rng) does the following:

1. Checks if rng has name and read methods set 2. Checks if the name already exists 3. Adds rng to global rng_list 4. May try to set rng to current_rng

If step 4 fails, it returns an error. However, it does not remove the rng from rng_list, causing a dangling reference which can result in use-after-free if the caller frees rng, since registration failed.

Add a list_del_init() cleanup step.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2bbb6983887fefc8026beab01198d30f47b7bd22 to before 30b2cc2966dac87ee95a99c49e28486c2a8129cdAffected 2bbb6983887fefc8026beab01198d30f47b7bd22 to before e37c67f768234e14cd6ea3b081568dd915c5b67eAffected 2bbb6983887fefc8026beab01198d30f47b7bd22 to before de4f1bcb61a73cc896decdbd27d61a34add93b53Affected 2bbb6983887fefc8026beab01198d30f47b7bd22 to before cf293c9c7424de0d04b51367d07f40570ce80231Affected 2bbb6983887fefc8026beab01198d30f47b7bd22 to before bee8d1fcdc8f389b595b0a4cf6fe8440f499458aAffected 2bbb6983887fefc8026beab01198d30f47b7bd22 to before 3a5834db2b1ce25649f330e78efe1ccde78967fdAffected 42802952a2725f85f7e36ee3b29593af5fe87197Affected 4.9.320 to before 4.10Affected
LinuxLinux	4.14Affected before 4.14Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

2bbb6983887fefc8026beab01198d30f47b7bd22 to before 30b2cc2966dac87ee95a99c49e28486c2a8129cdAffected
2bbb6983887fefc8026beab01198d30f47b7bd22 to before e37c67f768234e14cd6ea3b081568dd915c5b67eAffected
2bbb6983887fefc8026beab01198d30f47b7bd22 to before de4f1bcb61a73cc896decdbd27d61a34add93b53Affected
2bbb6983887fefc8026beab01198d30f47b7bd22 to before cf293c9c7424de0d04b51367d07f40570ce80231Affected
2bbb6983887fefc8026beab01198d30f47b7bd22 to before bee8d1fcdc8f389b595b0a4cf6fe8440f499458aAffected
2bbb6983887fefc8026beab01198d30f47b7bd22 to before 3a5834db2b1ce25649f330e78efe1ccde78967fdAffected
42802952a2725f85f7e36ee3b29593af5fe87197Affected
4.9.320 to before 4.10Affected

LinuxLinux

4.14Affected
before 4.14Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.