CVEvulnerability
CVE-2025-0577
4.8 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-02-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-331
Description
An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of functions may return predictable randomness if these functions are called again after the fork, which happens concurrently with a call to any of these functions.
Related
Weakness · CWE (1)
- CWE-331 Insufficient Entropy weakness
References
- https://access.redhat.com/security/cve/CVE-2025-0577 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2338871 bugzilla.redhat.com