CVE-2026-31739
published 2026-05-01CVE-2026-31739: In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTO_ALG_ASYNC The tegra crypto driver failed to set the…
PriorityP349high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.41%
33.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
crypto: tegra - Add missing CRYPTO_ALG_ASYNC
The tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its
asynchronous algorithms, causing the crypto API to select them for users
that request only synchronous algorithms. This causes crashes (at
least). Fix this by adding the flag like what the other drivers do.
Also remove the unnecessary CRYPTO_ALG_TYPE_* flags, since those just
get ignored and overridden by the registration function anyway.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0 < bdbf027a4504b4a86740de6beb6d18a957331839 | bdbf027a4504b4a86740de6beb6d18a957331839 |
| linux | linux | >= 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0 < 3aea268b6d5cde3b087df9eeecc3bc620aa09513 | 3aea268b6d5cde3b087df9eeecc3bc620aa09513 |
| linux | linux | >= 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0 < 429d05565eb19ee545d8a8395991372adbe4daf3 | 429d05565eb19ee545d8a8395991372adbe4daf3 |
| linux | linux | >= 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0 < 4b56770d345524fc2acc143a2b85539cf7d74bc1 | 4b56770d345524fc2acc143a2b85539cf7d74bc1 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 6.10 < 6.12.81 | 6.12.81 |
| linux | linux_kernel | >= 6.13 < 6.18.22 | 6.18.22 |
| linux | linux_kernel | >= 6.19 < 6.19.12 | 6.19.12 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: crypto: tegra - Add missing CRYPTO_ALG_ASYNC
vendor_redhat·2026-05-01·CVSS 5.5
CVE-2026-31739 [MEDIUM] CWE-166 kernel: crypto: tegra - Add missing CRYPTO_ALG_ASYNC
kernel: crypto: tegra - Add missing CRYPTO_ALG_ASYNC
A flaw was found in the Linux kernel's tegra crypto driver. The driver failed to correctly set a flag for its asynchronous cryptographic algorithms. This oversight could lead to the crypto API selecting asynchronous algorithms when a user specifically requests synchronous ones. Consequently, this mismatch can cause system crashes, resulting in a Denial of Service (DoS).
Package: kernel (Red Hat Enterprise Linux 10) - Fix deferred
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
GHSA
GHSA-f395-x2gf-vh84: In the Linux kernel, the following vulnerability has been resolved:
crypto: tegra - Add missing CRYPTO_ALG_ASYNC
The tegra crypto driver failed to s
ghsa_unreviewed·2026-05-01
CVE-2026-31739 [HIGH] GHSA-f395-x2gf-vh84: In the Linux kernel, the following vulnerability has been resolved:
crypto: tegra - Add missing CRYPTO_ALG_ASYNC
The tegra crypto driver failed to s
In the Linux kernel, the following vulnerability has been resolved:
crypto: tegra - Add missing CRYPTO_ALG_ASYNC
The tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its
asynchronous algorithms, causing the crypto API to select them for users
that request only synchronous algorithms. This causes crashes (at
least). Fix this by adding the flag like what the other drivers do.
Also remove the unnecessary CRYPTO_ALG_TYPE_* flags, since those just
get ignored and overridden by the registration function anyway.
No detection rules found.
No public exploits indexed.
2026-05-01
Published