Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - fail ahash requests on HASH idle timeout rk_hash_run() waits for RK_CRYPTO_HASH_STS to become idle after the final DMA transfer, but ignores the poll result. If the hash engine never becomes idle, the driver still reads the digest registers and finalizes the request with the previous success value. Store the poll result and finalize the request with the timeout error before reading the digest registers.
References
- https://git.kernel.org/stable/c/0a261177ad3245af393548d0632226d99c643191
- https://git.kernel.org/stable/c/2feb52b2796c25510903bf0f18a84cde44631391
- https://git.kernel.org/stable/c/a22dc48d58ef46e21c0172ba83c33f1c9859e63c
- https://git.kernel.org/stable/c/ae150db7826f21e8d19e54fb6243169628809c4d
- https://git.kernel.org/stable/c/e7d8ddd471d2895f1d4098832c21121d4191adaa
FAQ
What is CVE-2026-93156?
CVE-2026-93156 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - fail ahash requests on HASH idle timeout rk_hash_run() waits for RK_CRYPTO_HASH_STS to become idle after the fina...
How severe is CVE-2026-93156?
CVSS scoring is not yet available for CVE-2026-93156. Check NVD for updates.
Is there a patch for CVE-2026-93156?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.