The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16166
Reference (s):
- https://security.netapp.com/advisory/ntap-20200814-0004/
- URL: https://security.netapp.com/advisory/ntap-20200814-0004/
- FEDORA:FEDORA-2020-2cd6393548
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/AAPTLPAEKVAJYJ4LHN7VH4CN2W75R2YW/
- FEDORA:FEDORA-2020-8d634e31c0