• info
• discussion
• exploit
• solution
• references

Linux Kernel Random.C Device Reseed Weakness

The Linux kernel is prone to a weakness related to reseeding in the random device driver.

Linux kernel versions prior to 2.4.34.6 are vulnerable to this issue.

'Random.c' uses incorrect data to reseed the random number generator.

The impact of a successful exploit depends on how the application uses the random number generator.