A successful timing attack against /dev/urandom would be a major bug that you could expect to be highly prioritised by the Linux team. That is, for most people

A successful timing attack against /dev/urandom would be a major bug that you could expect to be highly prioritised by the Linux team. That is, for most people it is well outside the attack surface that they need to care about.