In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTO_ALG_ASYNC The tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its asynchronous algorithms, causing the crypto API to select them for users that request only synchronous algorithms. This causes crashes (at least). Fix this by adding the flag like what the other drivers do. Also remove the unnecessary CRYPTO_ALG_TYPE_* flags, since those just get ignored and overridden by the registration function anyway.
| Vendor | Product | Versions |
|---|---|---|
| nvidia | tegra crypto driver | 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0, 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0, 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0, 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0, 6.10 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| linux | linux | mitre_affected | 90% |
| open source | open source linux kernel | cert_advisory | 90% |
Updated description with details about CVE-2026-31739, changed severity to CRITICAL, and updated affected versions.
Initial creation
