https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:43:14 +0000 https://cve.radiocsirt.org/vuln/cve-2022-49698 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: use get_random_u32 instead of prandom</p> <p>bh might occur while updating per-cpu rnd_state from user context, ie. local_out path.</p> <p>BUG: using smp_processor_id() in preemptible [00000000] code: nginx/2725 caller is nft_ng_random_eval+0x24/0x54 [nft_numgen] Call Trace: check_preemption_disabled+0xde/0xe0 nft_ng_random_eval+0x24/0x54 [nft_numgen]</p> <p>Use the random driver instead, this also avoids need for local prandom state. Moreover, prandom now uses the random driver since d4150779e60f (&#34;random32: use real rng for non-deterministic randomness&#34;).</p> <p>Based on earlier patch from Pablo Neira.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: use get_random_u32 instead of prandom</p> <p>bh might occur while updating per-cpu rnd_state from user context, ie. local_out path.</p> <p>BUG: using smp_processor_id() in preemptible [00000000] code: nginx/2725 caller is nft_ng_random_eval+0x24/0x54 [nft_numgen] Call Trace: check_preemption_disabled+0xde/0xe0 nft_ng_random_eval+0x24/0x54 [nft_numgen]</p> <p>Use the random driver instead, this also avoids need for local prandom state. Moreover, prandom now uses the random driver since d4150779e60f (&#34;random32: use real rng for non-deterministic randomness&#34;).</p> <p>Based on earlier patch from Pablo Neira.</p> https://cve.radiocsirt.org/vuln/cve-2022-49698