The Linux kernel’s deterministic random bit generator, in CTR mode, contains a flaw in drbg_ctr_generate(). When the operation fails, the function incorrectly returns a success status, leaving the output buffer uninitialized. Callers that interpret the result as successful may use the uninitialized data, exposing ordinary kernel memory contents to the application layer. This leads to accidental information disclosure, but does not provide a path for arbitrary code execution or denial of service.

All Linux kernel releases that include the CTR_DRBG implementation in the crypto subsystem and have not yet integrated the fixed commit. The exact affected versions are not listed in the CVE data; any kernel build that contains the vulnerable code path is at risk. Updating to a kernel release containing the patch references eliminates the problem.

The EPSS score is less than 1% and the vulnerability is not listed in CISA’s KEV catalog, indicating a low probability of exploitation and no known active exploits. The CVSS score of 7.0 indicates a high severity rating. Based on the description, the likely attack vector is an attacker invoking the kernel’s crypto interface from user space, such as through the cryptographic API exposed by the kernel. Successful exploitation would allow reading of unintended memory, yielding moderate confidentiality risk while the likelihood remains low under current public knowledge.