Improper Check or Handling of Exceptional Conditions in Linux kernel - CVE-2026-93157

Vulnerability identifier: #VU150841

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-93157

CWE-ID: CWE-703

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to receive improperly collected random data.

The vulnerability exists due to improper handling of timeout errors and partial reads in the Xilinx TRNG driver when collecting random data from the hardware random-number generator. A local user can request random data to receive improperly collected random data.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/62219775a07ce0bd8085852f3d1e2d772bf6fdec
• https://git.kernel.org/stable/c/ba088974419326daf46c5dc03e2cf6ab6ab701f7
• https://git.kernel.org/stable/c/bdc3b37a935f28c3e9eb2f6e889b4644d859fb08

• Improper Check or Handling of Exceptional Conditions in Linux kernel char hw_random driver
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more