A vulnerability was found in GNU glibc up to 2.40. It has been rated as problematic. This issue affects the function
arc4random
. The manipulation leads to insufficiently random values.
The identification of this vulnerability is CVE-2025-0577. The attack needs to be approached within the local network. There is no exploit available.
It is recommended to upgrade the affected component.