Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove crypto_rng interface qcom-rng.c exposes the same… (CVE-2026-80835)

The Linux kernel's qcom-rng driver exposed the same hardware RNG through two interfaces: crypto_rng and hwrng. The implementation allowed concurrent generation operations from these interfaces without proper synchronization, specifically qcom_rng_generate() synchronized only with itself but not with qcom_hwrng_read(). This flaw could cause repeated or non-random output from the RNG hardware. Since the crypto_rng interface is effectively unused and being deprecated, the vulnerability was addressed by removing this interface to avoid conflicts and simplify the codebase, leaving only the hwrng interface active.

The vulnerability could result in the RNG producing repeated or non-random values due to concurrent unsynchronized access to hardware registers. This undermines the quality of randomness, which is critical for cryptographic operations relying on the RNG. However, since the vulnerable crypto_rng interface is not used in practice and is being phased out, the practical impact is limited.

The vulnerability has been resolved by removing the crypto_rng interface from the qcom-rng driver in the Linux kernel. This change eliminates the conflicting concurrent access and simplifies the code. Users should update to the Linux kernel version that includes this fix. No additional action is required since the deprecated interface is not used in practice.