The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.
[
{
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_type": "Line",
"id": "CVE-2020-16166-295a034e",
"target": {
"file": "lib/random32.c"
},
"digest": {
"line_hashes": [
"166354849177060281583539957075506706224",
"187936885302486139452677858702319139299",
"326553390951715087738623742353217830717",
"219813707536490148700255150731588888106"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_type": "Function",
"id": "CVE-2020-16166-50ff0188",
"target": {
"function": "add_interrupt_randomness",
"file": "drivers/char/random.c"
},
"digest": {
"length": 1239.0,
"function_hash": "328793712869558403125655953503750810984"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_type": "Line",
"id": "CVE-2020-16166-bc1514e4",
"target": {
"file": "drivers/char/random.c"
},
"digest": {
"line_hashes": [
"97099641882673639258274499539892079779",
"244853480977731193706179808354593387661",
"333066512356775604612125499811751368927",
"5202168442536638270102108403591451839"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_type": "Function",
"id": "CVE-2020-16166-dd7a1e17",
"target": {
"function": "update_process_times",
"file": "kernel/time/timer.c"
},
"digest": {
"length": 258.0,
"function_hash": "320049049780352676592619955196251428700"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_type": "Line",
"id": "CVE-2020-16166-e3f7de33",
"target": {
"file": "include/linux/random.h"
},
"digest": {
"line_hashes": [
"265949335257160421048841755726896411418",
"85740715644680951153291244963308001139",
"265097868211723783790988614324628926567",
"269572859882643590182705241053724691719",
"217761889960474336027687829965283839789",
"23842665874019155791647334962148317314",
"94123984677896839415871256317920164235"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4",
"signature_type": "Line",
"id": "CVE-2020-16166-e99ce6b5",
"target": {
"file": "kernel/time/timer.c"
},
"digest": {
"line_hashes": [
"107562766937772993160365134240240111693",
"104016285908153339688381071319494674617",
"82348832145861357319721213900466045708",
"211652220109442969856897795672568345046",
"232806145868666657769219587235973487701",
"204892034185886898621130095680721841787",
"205400366021416542173259916174363738301",
"283485590326334381899329065818198825580"
],
"threshold": 0.9
},
"deprecated": false
}
]