AIKIDO-2026-729468
Mbed-TLS.mbedtls is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
30
Low Risk
This Affects:
Mbed-TLS.mbedtlsTL;DR
On Linux, when the getrandom() system call is unavailable or blocked, Mbed TLS falls back to reading /dev/urandom, which can return data before the kernel entropy pool is initialized. On a freshly installed device without a hardware random generator, cryptographic operations performed early in boot may use predictable randomness. Keys and randomized ECDSA signatures generated during this window can be compromised. The fix avoids using /dev/urandom output before the system has gathered sufficient entropy.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your Linux device generates keys early in boot without a hardware random generator.
Background info
Mbed-TLS.mbedtls is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in versions 1.0.0 - 3.6.5 and 4.0.0 - 4.0.0.
How to fix this
Upgrade the Mbed-TLS.mbedtls library to the patch version.
Links
GitHub Release
Other
mbed-tls.readthedocs.io/en/latest/security-advisories/mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-dev-random/
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.