Riskcovery

CVE-2026-93156

crypto: rk3288 - fail ahash requests on HASH idle timeout

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: rk3288 - fail ahash requests on HASH idle timeout

rk_hash_run() waits for RK_CRYPTO_HASH_STS to become idle after the final DMA transfer, but ignores the poll result. If the hash engine never becomes idle, the driver still reads the digest registers and finalizes the request with the previous success value.

Store the poll result and finalize the request with the timeout error before reading the digest registers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 37bc22159c456ad43fb852fc6ed60f4081df25df to before a22dc48d58ef46e21c0172ba83c33f1c9859e63cAffected
  • 37bc22159c456ad43fb852fc6ed60f4081df25df to before 2feb52b2796c25510903bf0f18a84cde44631391Affected
  • 37bc22159c456ad43fb852fc6ed60f4081df25df to before e7d8ddd471d2895f1d4098832c21121d4191adaaAffected
  • 37bc22159c456ad43fb852fc6ed60f4081df25df to before 0a261177ad3245af393548d0632226d99c643191Affected
  • 37bc22159c456ad43fb852fc6ed60f4081df25df to before ae150db7826f21e8d19e54fb6243169628809c4dAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.