CVE-2026-87043 | Zephyr Project up to 4.4.x Entropy Device random_entropy_device.c rand_get uninitialized resource

A vulnerability categorized as critical has been discovered in Zephyr Project Zephyr up to 4.4.x. Affected by this issue is the function rand_get of the file subsys/random/random_entropy_device.c of the component Entropy Device. Such manipulation leads to uninitialized resource.

This vulnerability is referenced as CVE-2026-87043. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More