In the Linux kernel, the following vulnerability has been resolved:

crypto: jitterentropy - replace long-held spinlock with mutex

jent_kcapi_random() serializes the shared jitterentropy state, but it
currently holds a spinlock across the jent_read_entropy() call. That
path performs expensive jitter collection and SHA3 conditioning, so
parallel readers can trigger stalls as contending waiters spin for
the same lock.

To prevent non-preemptible lock hold, replace rng->jent_lock with a
mutex so contended readers sleep instead of spinning on a shared lock
held across expensive entropy generation.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
bb5530e4082446aac3a3d69780cd4dbfa4520013 affected < 18216b8ab6904753eaf31baf453cb02ecd202ba4
bb5530e4082446aac3a3d69780cd4dbfa4520013 affected < 4c03e6eb98443dc4d6d422a9780034a5b75376b4
bb5530e4082446aac3a3d69780cd4dbfa4520013 affected < ff734dbd9e2432601a6dcd167cfb0bf8a36d1880
bb5530e4082446aac3a3d69780cd4dbfa4520013 affected < ec427dc5286da1ed08f2d510e2147a7581b0cb02
bb5530e4082446aac3a3d69780cd4dbfa4520013 affected < 01d798e9feb30212952d4e992801ba6bd6a82351
Linux Linux affected
Version Status Constraints
4.2 affected —
0 unaffected < 4.2
6.6.141 unaffected ≤ 6.6.*
6.12.91 unaffected ≤ 6.12.*
6.18.33 unaffected ≤ 6.18.*
7.0.10 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/01d798e9feb30212952d4e992801ba6bd6a82351 cve-icon
https://git.kernel.org/stable/c/18216b8ab6904753eaf31baf453cb02ecd202ba4 cve-icon
https://git.kernel.org/stable/c/4c03e6eb98443dc4d6d422a9780034a5b75376b4 cve-icon
https://git.kernel.org/stable/c/ec427dc5286da1ed08f2d510e2147a7581b0cb02 cve-icon
https://git.kernel.org/stable/c/ff734dbd9e2432601a6dcd167cfb0bf8a36d1880 cve-icon
History

Wed, 24 Jun 2026 07:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: crypto: jitterentropy - replace long-held spinlock with mutex jent_kcapi_random() serializes the shared jitterentropy state, but it currently holds a spinlock across the jent_read_entropy() call. That path performs expensive jitter collection and SHA3 conditioning, so parallel readers can trigger stalls as contending waiters spin for the same lock. To prevent non-preemptible lock hold, replace rng->jent_lock with a mutex so contended readers sleep instead of spinning on a shared lock held across expensive entropy generation.
Title crypto: jitterentropy - replace long-held spinlock with mutex
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-24T07:14:26.649Z

Reserved: 2026-06-09T07:44:35.370Z

Link: CVE-2026-52936

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-24T11:15:03Z

Weaknesses

No weakness.