CVE-2026-64306

A vulnerability in the Linux kernel's CTR_DRBG implementation may cause the `drbg_ctr_generate()` function to incorrectly report success even when it fails, resulting in uninitialized output buffers. This flaw could lead to potential data leakage or security issues in applications relying on the random number generator for cryptographic operations. Organizations using affected Linux systems should prioritize patching this vulnerability to ensure the integrity of their cryptographic processes.