A vulnerability has been discovered in haveged which could allow local privilege escalation
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/haveged | * | < 1.9.21 | >= 1.9.21 |
haveged is a simple entropy daemon using the HAVEGE algorithm.
A vulnerability has been discovered in haveged. Please review the CVE identifier referenced below for details.
Root privilege escalation may be achieved by an attacker.
There is no known workaround at this time.
All haveged users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/haveged-1.9.21"
Alternatively, consider not using haveged anymore on modern Linux kernel versions, per https://www.openwall.com/lists/oss-security/2026/05/19/4