CVE-2020-16166: linux kernel +14 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-16166

CVSS 3.7 · Low EPSS 5,2%

Kerentanan Use of Insufficiently Random Values pada linux kernel, opensuse leap +13 lainnya. Skor CVSS 3.1 3.7 (Low) menurut NVD.

Deskripsi (NVD)

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.

Rincian

Terbit di NVD: 30 Juli 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 3.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-330: Use of Insufficiently Random Values
EPSS (30 hari): 5,2% peluang dieksploitasi; lebih tinggi dari 92,3% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Semua versi hingga 5.7.11
opensuse	leap	Versi 15.1
opensuse	leap	Versi 15.2
fedoraproject	fedora	Versi 31
fedoraproject	fedora	Versi 32
debian	debian linux	Versi 9.0
canonical	ubuntu linux	Versi 14.04
canonical	ubuntu linux	Versi 16.04
canonical	ubuntu linux	Versi 18.04
canonical	ubuntu linux	Versi 20.04
netapp	active iq unified manager	Versi 9.5 dan sesudahnya
netapp	cloud volumes ontap mediator	Semua versi
netapp	e-series santricity os controller	Versi 11.0.0 hingga 11.60.3
netapp	hci bootstrap os	Semua versi
netapp	hci management node	Semua versi
netapp	solidfire	Semua versi
netapp	steelstore cloud integrated storage	Semua versi
netapp	storagegrid	Semua versi hingga 9.0.4
netapp	h410c firmware	Semua versi
oracle	sd-wan edge	Versi 8.2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f227e3ec3b5cad859ad15666874405e8c1b... patch · advisory vendor
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c51f8f88d705e06bd696d7510aff22b3... patch · advisory vendor
https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4 patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuApr2021.html patch · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html mailing list · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html mailing list · advisory pihak ketiga
https://arxiv.org/pdf/2012.07432.pdf deskripsi teknis · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html mailing list · advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20200814-0004/ advisory pihak ketiga
https://usn.ubuntu.com/4525-1/ advisory pihak ketiga
https://usn.ubuntu.com/4526-1/ advisory pihak ketiga
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AAPTLPAEKVAJY...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFBCLQWJI5I4G...

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.