Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-52936

crypto: jitterentropy - replace long-held spinlock with mutex

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: jitterentropy - replace long-held spinlock with mutex jent_kcapi_random() serializes the shared jitterentropy state, but it currently holds a spinlock across the jent_read_entropy() call. That path performs expensive jitter collection and SHA3 conditioning, so parallel readers can trigger stalls as contending waiters spin for the same lock. To prevent non-preemptible lock hold, replace rng->jent_lock with a mutex so contended readers sleep instead of spinning on a shared lock held across expensive entropy generation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bb5530e4082446aac3a3d69780cd4dbfa4520013 to < 21de77d06f6b540e870e64ef5ff56be4eb8ba08faffected
  • bb5530e4082446aac3a3d69780cd4dbfa4520013 to < 18216b8ab6904753eaf31baf453cb02ecd202ba4affected
  • bb5530e4082446aac3a3d69780cd4dbfa4520013 to < 4c03e6eb98443dc4d6d422a9780034a5b75376b4affected
  • bb5530e4082446aac3a3d69780cd4dbfa4520013 to < ff734dbd9e2432601a6dcd167cfb0bf8a36d1880affected
  • bb5530e4082446aac3a3d69780cd4dbfa4520013 to < ec427dc5286da1ed08f2d510e2147a7581b0cb02affected
  • bb5530e4082446aac3a3d69780cd4dbfa4520013 to < 01d798e9feb30212952d4e992801ba6bd6a82351affected

Linux Linux

Default version status: affected

  • 4.2affected
  • 0 to < 4.2unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.141 to ≤ 6.6.*unaffected
  • 6.12.91 to ≤ 6.12.*unaffected
  • 6.18.33 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References