CVE-2026-74438
crypto: sun4i-ss - Remove insecure and unused rng_alg
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rng_alg Remove sun4i_ss_rng, as it is insecure and unused: - It has multiple vulnerabilities. sun4i_ss_prng_seed() is missing locking and has a buffer overflow. sun4i_ss_prng_generate() fails to fill the entire buffer with cryptographic random bytes, because it rounds the destination length down and also doesn't actually wait for the hardware to be ready before pulling bytes from it. - No user of this code is known. It's usable only theoretically via the "rng" algorithm type of AF_ALG. But userspace actually just uses the actual Linux RNG (/dev/random etc) instead. And rng_algs don't contribute entropy to the actual Linux RNG either. (This may have been confused with hwrng, which does contribute entropy.) The sun4i_ss_prng_seed() buffer overflow was reported by Tianchu Chen and discovered by Atuin - Automated Vulnerability Discovery Engine There's no point in fixing all these vulnerabilities individually when this is unused code, so let's just remove it.
INFO
Published Date :
Aug. 15, 2026, 6:22 a.m.
Last Modified :
Aug. 15, 2026, 6:22 a.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products
The following products are affected by CVE-2026-74438
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Solution
- Remove the sun4i_ss_rng code.
- Eliminate the rng_alg type.
- Ensure no users reference the code.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-74438.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-74438 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-74438
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-74438 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-74438 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 15, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'b8ae5c7387ad075ee61e8c8774ce2bca46bc9236', 'lessThan': '2eafecaba1b46bb9774eaf3556619fd5b6a17c1c', 'versionType': 'git'}, {'status': 'affected', 'version': 'b8ae5c7387ad075ee61e8c8774ce2bca46bc9236', 'lessThan': 'ee2458f8188732aa53a5d42f56e87bfad288b44e', 'versionType': 'git'}, {'status': 'affected', 'version': 'b8ae5c7387ad075ee61e8c8774ce2bca46bc9236', 'lessThan': '306ded31bfa00a69d25823a60d7c797170bfb4f8', 'versionType': 'git'}, {'status': 'affected', 'version': 'b8ae5c7387ad075ee61e8c8774ce2bca46bc9236', 'lessThan': 'e4b7b9819811c4c51064c3d3d3c02f0be7491707', 'versionType': 'git'}, {'status': 'affected', 'version': 'b8ae5c7387ad075ee61e8c8774ce2bca46bc9236', 'lessThan': 'c401492e01c7bfd38cf14c94d85c7efafe7d1a25', 'versionType': 'git'}, {'status': 'affected', 'version': 'b8ae5c7387ad075ee61e8c8774ce2bca46bc9236', 'lessThan': '9c8086d9511189c34dfa3f9e3a03f2bee12f56a5', 'versionType': 'git'}, {'status': 'affected', 'version': 'b8ae5c7387ad075ee61e8c8774ce2bca46bc9236', 'lessThan': 'b2c41fa9dd8fc740c489e060b199165771f268d1', 'versionType': 'git'}], 'programFiles': ['arch/arm/configs/sunxi_defconfig', 'drivers/crypto/allwinner/Kconfig', 'drivers/crypto/allwinner/sun4i-ss/Makefile', 'drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c', 'drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c', 'drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.14'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.14', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['arch/arm/configs/sunxi_defconfig', 'drivers/crypto/allwinner/Kconfig', 'drivers/crypto/allwinner/sun4i-ss/Makefile', 'drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c', 'drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c', 'drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rng_alg Remove sun4i_ss_rng, as it is insecure and unused: - It has multiple vulnerabilities. sun4i_ss_prng_seed() is missing locking and has a buffer overflow. sun4i_ss_prng_generate() fails to fill the entire buffer with cryptographic random bytes, because it rounds the destination length down and also doesn't actually wait for the hardware to be ready before pulling bytes from it. - No user of this code is known. It's usable only theoretically via the "rng" algorithm type of AF_ALG. But userspace actually just uses the actual Linux RNG (/dev/random etc) instead. And rng_algs don't contribute entropy to the actual Linux RNG either. (This may have been confused with hwrng, which does contribute entropy.) The sun4i_ss_prng_seed() buffer overflow was reported by Tianchu Chen and discovered by Atuin - Automated Vulnerability Discovery Engine There's no point in fixing all these vulnerabilities individually when this is unused code, so let's just remove it. Added Reference https://git.kernel.org/stable/c/2eafecaba1b46bb9774eaf3556619fd5b6a17c1c Added Reference https://git.kernel.org/stable/c/306ded31bfa00a69d25823a60d7c797170bfb4f8 Added Reference https://git.kernel.org/stable/c/9c8086d9511189c34dfa3f9e3a03f2bee12f56a5 Added Reference https://git.kernel.org/stable/c/b2c41fa9dd8fc740c489e060b199165771f268d1 Added Reference https://git.kernel.org/stable/c/c401492e01c7bfd38cf14c94d85c7efafe7d1a25 Added Reference https://git.kernel.org/stable/c/e4b7b9819811c4c51064c3d3d3c02f0be7491707 Added Reference https://git.kernel.org/stable/c/ee2458f8188732aa53a5d42f56e87bfad288b44e