CVE-2025-0577

4.8 mediumEPSS 0.2%

Medium (4.8). EPSS 0.2% chance of exploitation in the next 30 days.

An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of functions may return predictable randomness if these functions are called again after the fork, which happens concurrently with a call to any of these functions.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-331
Published: 2026-02-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://access.redhat.com/security/cve/CVE-2025-0577
https://bugzilla.redhat.com/show_bug.cgi?id=2338871

Check your stack JSON