Unrated severityNVD Advisory· Published Sep 17, 2026· Updated Oct 30, 2026
CVE-2026-93163
CVE-2026-93163
Description
In the Linux kernel, the following vulnerability has been resolved:
hwrng: core - fix rng list on registration error
hwrng_register(rng) does the following:
- Checks if rng has name and read methods set
- Checks if the name already exists
- Adds rng to global rng_list
- May try to set rng to current_rng
If step 4 fails, it returns an error. However, it does not remove the rng from rng_list, causing a dangling reference which can result in use-after-free if the caller frees rng, since registration failed.
Add a list_del_init() cleanup step.
Affected products
4- osv-coords2 versions
>= 4.14.0, < 6.1.191+ 1 more
- (no CPE)range: >= 4.14.0, < 6.1.191
- (no CPE)range: < 7.2.7-1.1
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/30b2cc2966dac87ee95a99c49e28486c2a8129cdnvd
- git.kernel.org/stable/c/3a5834db2b1ce25649f330e78efe1ccde78967fdnvd
- git.kernel.org/stable/c/bee8d1fcdc8f389b595b0a4cf6fe8440f499458anvd
- git.kernel.org/stable/c/cf293c9c7424de0d04b51367d07f40570ce80231nvd
- git.kernel.org/stable/c/de4f1bcb61a73cc896decdbd27d61a34add93b53nvd
- git.kernel.org/stable/c/e37c67f768234e14cd6ea3b081568dd915c5b67envd
News mentions
0No linked articles in our index yet.