CVE-2025-0577CWE-331

Glibc: vdso getrandom acceleration may return predictable randomness

Medium · published February 18, 2026

CVSS v3.1
4.8
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of functions may return predictable randomness if these functions are called again after the fork, which happens concurrently with a call to any of these functions.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Weakness
CWE-331 · Insufficient Entropy
Published
2026-02-18T20:25Z
EPSS history
Timeline
  • 18 FEB 20:25Z
    Glibc: vdso getrandom acceleration may return predictable randomness
    cvelistv5