CVE-2020-16166

—

CVSS 3.1

3.7 low

EPSS

5%p92

Published

Jul 30, 2020 (Jul 30, 2020)

Modified

Jun 17, 2026

Description

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.

Vendors: linux opensuse fedoraproject debian canonical netapp oracle
Products: linux kernel, leap, fedora, debian linux, ubuntu linux, active iq unified manager, cloud volumes ontap mediator, e-series santricity os controller, hci bootstrap os, hci management node, solidfire, steelstore cloud integrated storage
Weakness: CWE-330
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (5.3%)

In the news0 stories

No ingested article mentions this CVE yet.