The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "include/linux/random.h"
},
"id": "CVE-2020-16166-092332d7",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265949335257160421048841755726896411418",
"85740715644680951153291244963308001139",
"265097868211723783790988614324628926567",
"269572859882643590182705241053724691719",
"217761889960474336027687829965283839789",
"23842665874019155791647334962148317314",
"94123984677896839415871256317920164235"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "kernel/time/timer.c"
},
"id": "CVE-2020-16166-0cbbed50",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"107562766937772993160365134240240111693",
"104016285908153339688381071319494674617",
"82348832145861357319721213900466045708",
"211652220109442969856897795672568345046",
"232806145868666657769219587235973487701",
"204892034185886898621130095680721841787",
"205400366021416542173259916174363738301",
"283485590326334381899329065818198825580"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "add_interrupt_randomness",
"file": "drivers/char/random.c"
},
"id": "CVE-2020-16166-25ab696b",
"signature_type": "Function",
"digest": {
"length": 1239.0,
"function_hash": "328793712869558403125655953503750810984"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "lib/random32.c"
},
"id": "CVE-2020-16166-27bff679",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"166354849177060281583539957075506706224",
"187936885302486139452677858702319139299",
"326553390951715087738623742353217830717",
"219813707536490148700255150731588888106"
]
}
},
{
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "lib/random32.c"
},
"id": "CVE-2020-16166-295a034e",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"166354849177060281583539957075506706224",
"187936885302486139452677858702319139299",
"326553390951715087738623742353217830717",
"219813707536490148700255150731588888106"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c51f8f88d705e06bd696d7510aff22b33eb8e638",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "prandom_u32",
"file": "lib/random32.c"
},
"id": "CVE-2020-16166-43b40371",
"signature_type": "Function",
"digest": {
"length": 173.0,
"function_hash": "79340473955832497481365095866370715949"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "update_process_times",
"file": "kernel/time/timer.c"
},
"id": "CVE-2020-16166-479bfc30",
"signature_type": "Function",
"digest": {
"length": 258.0,
"function_hash": "320049049780352676592619955196251428700"
}
},
{
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "add_interrupt_randomness",
"file": "drivers/char/random.c"
},
"id": "CVE-2020-16166-50ff0188",
"signature_type": "Function",
"digest": {
"length": 1239.0,
"function_hash": "328793712869558403125655953503750810984"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/char/random.c"
},
"id": "CVE-2020-16166-b67d5fa3",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97099641882673639258274499539892079779",
"244853480977731193706179808354593387661",
"333066512356775604612125499811751368927",
"5202168442536638270102108403591451839"
]
}
},
{
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/char/random.c"
},
"id": "CVE-2020-16166-bc1514e4",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97099641882673639258274499539892079779",
"244853480977731193706179808354593387661",
"333066512356775604612125499811751368927",
"5202168442536638270102108403591451839"
]
}
},
{
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "update_process_times",
"file": "kernel/time/timer.c"
},
"id": "CVE-2020-16166-dd7a1e17",
"signature_type": "Function",
"digest": {
"length": 258.0,
"function_hash": "320049049780352676592619955196251428700"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c51f8f88d705e06bd696d7510aff22b33eb8e638",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "include/linux/prandom.h"
},
"id": "CVE-2020-16166-df946ec3",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"231103250990958947290071549691085441279",
"218659662602463324195247360071413958095",
"312655539637843847773433603262245166105",
"297939308420693132596392187222348276458",
"255646024000837076618148436672252612620",
"172099049909133373350484985143582850463",
"270915742309122838985392154324863006452"
]
}
},
{
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "include/linux/random.h"
},
"id": "CVE-2020-16166-e3f7de33",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265949335257160421048841755726896411418",
"85740715644680951153291244963308001139",
"265097868211723783790988614324628926567",
"269572859882643590182705241053724691719",
"217761889960474336027687829965283839789",
"23842665874019155791647334962148317314",
"94123984677896839415871256317920164235"
]
}
},
{
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "kernel/time/timer.c"
},
"id": "CVE-2020-16166-e99ce6b5",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"107562766937772993160365134240240111693",
"104016285908153339688381071319494674617",
"82348832145861357319721213900466045708",
"211652220109442969856897795672568345046",
"232806145868666657769219587235973487701",
"204892034185886898621130095680721841787",
"205400366021416542173259916174363738301",
"283485590326334381899329065818198825580"
]
}
}
]