Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-93156

crypto: rk3288 - fail ahash requests on HASH idle timeout

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - fail ahash requests on HASH idle timeout rk_hash_run() waits for RK_CRYPTO_HASH_STS to become idle after the final DMA transfer, but ignores the poll result. If the hash engine never becomes idle, the driver still reads the digest registers and finalizes the request with the previous success value. Store the poll result and finalize the request with the timeout error before reading the digest registers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 37bc22159c456ad43fb852fc6ed60f4081df25df to < a22dc48d58ef46e21c0172ba83c33f1c9859e63caffected
  • 37bc22159c456ad43fb852fc6ed60f4081df25df to < 2feb52b2796c25510903bf0f18a84cde44631391affected
  • 37bc22159c456ad43fb852fc6ed60f4081df25df to < e7d8ddd471d2895f1d4098832c21121d4191adaaaffected
  • 37bc22159c456ad43fb852fc6ed60f4081df25df to < 0a261177ad3245af393548d0632226d99c643191affected
  • 37bc22159c456ad43fb852fc6ed60f4081df25df to < ae150db7826f21e8d19e54fb6243169628809c4daffected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References