CVE ID:	CVE-2009-3238
Description:	The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to "return the same value over and over again for long stretches of time."
Test IDs:	1.3.6.1.4.1.25623.1.0.66207   1.3.6.1.4.1.25623.1.0.66208   1.3.6.1.4.1.25623.1.0.66209
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3238 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11168 RedHat Security Advisories: RHSA-2009:1438 http://www.redhat.com/support/errata/RHSA-2009-1438.html http://secunia.com/advisories/37105 http://secunia.com/advisories/37351 SuSE Security Announcement: SUSE-SA:2009:054 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html SuSE Security Announcement: SUSE-SA:2010:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html http://www.ubuntu.com/usn/USN-852-1