CVE-2026-31739 Details
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTO_ALG_ASYNC The tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its asynchronous algorithms, causing the crypto API to select them for users that request only synchronous algorithms. This causes crashes (at least). Fix this by adding the flag like what the other drivers do. Also remove the unnecessary CRYPTO_ALG_TYPE_* flags, since those just get ignored and overridden by the registration function anyway.
A vulnerability in the Tegra crypto driver of the Linux kernel was introduced by not properly setting the CRYPTO_ALG_ASYNC flag for asynchronous algorithms. This oversight led the crypto API to incorrectly select these algorithms for users requesting only synchronous ones, causing crashes. The issue has been addressed by adding the missing flag, aligning the driver with the correct behavior of others. Additionally, unnecessary CRYPTO_ALG_TYPE_* flags were removed, as they were ignored and overwritten by the registration function.
Users can apply the latest patch available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3aea268b6d5cde3b087df9eeecc3bc620aa09513 | kernel.org | Patch |
| https://git.kernel.org/stable/c/429d05565eb19ee545d8a8395991372adbe4daf3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4b56770d345524fc2acc143a2b85539cf7d74bc1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/bdbf027a4504b4a86740de6beb6d18a957331839 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-617 | Reachable Assertion | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.10, < 6.12.81 >= 6.13, < 6.18.22 >= 6.19, < 6.19.12 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 7, 2026 | Initial Analysis | [email protected] |
| May 3, 2026 | CVE Modified | kernel.org |
| May 1, 2026 | New CVE Received | kernel.org |