CVE-2026-93156
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - fail ahash requests on HASH idle timeout rk_hash_run() waits for RK_CRYPTO_HASH_STS to become idle after the final DMA transfer, but ignores the poll result. If the hash engine never becomes idle, the driver still reads the digest registers and finalizes the request with the previous success value. Store the poll result and finalize the request with the timeout error before reading the digest registers.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
Propose a mitigation on Community Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
References
- https://git.kernel.org/stable/c/0a261177ad3245af393548d0632226d99c643191
- https://git.kernel.org/stable/c/2feb52b2796c25510903bf0f18a84cde44631391
- https://git.kernel.org/stable/c/a22dc48d58ef46e21c0172ba83c33f1c9859e63c
- https://git.kernel.org/stable/c/ae150db7826f21e8d19e54fb6243169628809c4d
- https://git.kernel.org/stable/c/e7d8ddd471d2895f1d4098832c21121d4191adaa
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.