Use of insufficiently random values in mbed TLS - CVE-2026-34871

Vulnerability details

The vulnerability allows a local user to compromise cryptographic operations by causing the use of predictable random data.

The vulnerability exists due to improper fallback to /dev/urandom in entropy collection on Linux when getrandom() is unavailable or blocked. A local user can control the system state or restrict access to getrandom() to force the use of /dev/urandom during early boot, leading to insufficient entropy and predictable cryptographic outputs.

Devices without hardware random number generators are especially at risk during initial boot or OS installation. The issue affects Linux platforms where getrandom() is not available (kernel <3.17), blocked by sandboxing, or not supported by the C library.

Affected software

How to mitigate CVE-2026-34871

External References

• https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-dev-random/

Related Security Bulletins

• Multiple vulnerabilities in ARM mbed TLS
• Multiple vulnerabilities in ARM TF-PSA-Crypto
• Fedora 42 update for mbedtls
• Fedora 43 update for mbedtls
• Fedora 44 update for mbedtls
• Fedora EPEL 10.1 update for mbedtls
• Fedora EPEL 10.2 update for mbedtls
• Fedora EPEL 10.3 update for mbedtls
• Fedora 45 update for dolphin-emu