By weakness (CWE)

CWE-331: related vulnerabilities

CVEs classified under CWE-331. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-13199MEDIUM 4.0

  Raspberry Pi 5 and Compute Module 5 devices use firmware stored on an EEPROM chip that should generate random values to protect the Linux kernel's memory layout and seed the system's random number generator. However, this firmware is producing predictable values instead. This means the kernel loads at the same memory address every time a device boots, and across different devices—information an attacker could use to craft exploits more reliably. The weak random seed may also cause the system to take longer to boot while gathering entropy from other sources.