Description
Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.11.5-1 | — |
| Debian 13 | linux | 3.11.5-1 | — |
| Debian 12 | linux | 3.11.5-1 | — |
| Debian 6.0 | linux-2.6 | 2.6.32-48squeeze5 | DSA-2906-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +16 | 2.6.32-431.el6 | RHSA-2013:1645 |
| RHEL 5 | kernel +12 | 2.6.18-371.1.2.el5 | RHSA-2013:1449 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | kernel-rt +11 | 3.8.13-rt14.25.el6rt | RHSA-2013:1490 |
Advisories 4
- RHSA-2013:1645 Red Hat Security Advisory: Red Hat Enterprise Linux 6 kernel update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2013:1490 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2013:1449 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2906-1 linux-2.6 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- USN-2065-1 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1007690
- USN-2110-1 vendor-advisory
- RHSA-2013:1490 vendor-advisory
- RHSA-2013:1645 vendor-advisory
- USN-2076-1 vendor-advisory
- USN-2158-1 vendor-advisory
- USN-2070-1 vendor-advisory
- USN-2071-1 vendor-advisory
- USN-2109-1 vendor-advisory
- RHSA-2013:1449 vendor-advisory
- 62740 vdb-entry
- USN-2074-1 vendor-advisory
- USN-2068-1 vendor-advisory
- [linux-crypto] 20130917 [PATCH] ansi_cprng: Fix off by one error in non-block size request mailing-list
- USN-2072-1 vendor-advisory
- USN-2075-1 vendor-advisory
- USN-2064-1 vendor-advisory