Answer in brief
CVE-2026-93163 records a Unknown severity vulnerability in hwrng: core - fix rng list on registration error. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2bbb6983887fefc8026beab01198d30f47b7bd22 <de4f1bcb61a73cc896decdbd27d61a34add93b53 || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <cf293c9c7424de0d04b51367d07f40570ce80231 || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <bee8d1fcdc8f389b595b0a4cf6fe8440f499458a || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <3a5834db2b1ce25649f330e78efe1ccde78967fd || 42802952a2725f85f7e36ee3b29593af5fe87197 || >=4.9.320 <4.10 | de4f1bcb61a73cc896decdbd27d61a34add93b53, cf293c9c7424de0d04b51367d07f40570ce80231, bee8d1fcdc8f389b595b0a4cf6fe8440f499458a, 3a5834db2b1ce25649f330e78efe1ccde78967fd, 4.10 |
| Linux/Linuxgeneric | 4.14 | Not reported |
| Linux/Linuxgeneric | >=2bbb6983887fefc8026beab01198d30f47b7bd22 <e37c67f768234e14cd6ea3b081568dd915c5b67e || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <de4f1bcb61a73cc896decdbd27d61a34add93b53 || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <cf293c9c7424de0d04b51367d07f40570ce80231 || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <bee8d1fcdc8f389b595b0a4cf6fe8440f499458a || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <3a5834db2b1ce25649f330e78efe1ccde78967fd || 42802952a2725f85f7e36ee3b29593af5fe87197 || >=4.9.320 <4.10 | e37c67f768234e14cd6ea3b081568dd915c5b67e, de4f1bcb61a73cc896decdbd27d61a34add93b53, cf293c9c7424de0d04b51367d07f40570ce80231, bee8d1fcdc8f389b595b0a4cf6fe8440f499458a, 3a5834db2b1ce25649f330e78efe1ccde78967fd, 4.10 |
| Linux/Linuxgeneric | >=2bbb6983887fefc8026beab01198d30f47b7bd22 <30b2cc2966dac87ee95a99c49e28486c2a8129cd || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <e37c67f768234e14cd6ea3b081568dd915c5b67e || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <de4f1bcb61a73cc896decdbd27d61a34add93b53 || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <cf293c9c7424de0d04b51367d07f40570ce80231 || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <bee8d1fcdc8f389b595b0a4cf6fe8440f499458a || >=2bbb6983887fefc8026beab01198d30f47b7bd22 <3a5834db2b1ce25649f330e78efe1ccde78967fd || 42802952a2725f85f7e36ee3b29593af5fe87197 || >=4.9.320 <4.10 | 30b2cc2966dac87ee95a99c49e28486c2a8129cd, e37c67f768234e14cd6ea3b081568dd915c5b67e, de4f1bcb61a73cc896decdbd27d61a34add93b53, cf293c9c7424de0d04b51367d07f40570ce80231, bee8d1fcdc8f389b595b0a4cf6fe8440f499458a, 3a5834db2b1ce25649f330e78efe1ccde78967fd, 4.10 |
Published upstream
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 30, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 17, 2026
In the Linux kernel, the following vulnerability has been resolved: hwrng: core - fix rng list on registration error hwrng_register(rng) does the following: 1. Checks if rng has name and read methods set 2. Checks if the name already exists 3. Adds rng to global rng_list 4. May try to set rng to current_rng If step 4 fails, it returns an error. However, it does not remove the rng from rng_list, causing a dangling reference which can result in use-after-free if the caller frees rng, since registration failed. Add a list_del_init() cleanup step.
Quoted source text, attributed separately from HOL analysis.