High severity · published May 1, 2026
CVE-2026-31739
crypto: tegra - Add missing CRYPTO_ALG_ASYNC
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: tegra - Add missing CRYPTO_ALG_ASYNC
The tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its
asynchronous algorithms, causing the crypto API to select them for users
that request only synchronous algorithms. This causes crashes (at
least). Fix this by adding the flag like what the other drivers do.
Also remove the unnecessary CRYPTO_ALG_TYPE_* flags, since those just
get ignored and overridden by the registration function anyway.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
6.10 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; 7.0; 7.0; +3 more · source: NVD
LI
Linux · Linux
0880bb3b00c855fc244b7177ffdaafef4d0aa1e0 before bdbf027a4504b4a86740de6beb6d18a957331839; 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0 before 3aea268b6d5cde3b087df9eeecc3bc620aa09513; 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0 before 429d05565eb19ee545d8a8395991372adbe4daf3; 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0 before 4b56770d345524fc2acc143a2b85539cf7d74bc1; 6.10 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-31739
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-31739
Patch
https://git.kernel.org/stable/c/3aea268b6d5cde3b087df9eeecc3bc620aa09513
Patch
https://git.kernel.org/stable/c/429d05565eb19ee545d8a8395991372adbe4daf3
Patch
https://git.kernel.org/stable/c/4b56770d345524fc2acc143a2b85539cf7d74bc1
Patch
https://git.kernel.org/stable/c/bdbf027a4504b4a86740de6beb6d18a957331839
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability
