CVE-2026-93156

CVE-2026-93156

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
9.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: rk3288 - fail ahash requests on HASH idle timeout

rk_hash_run() waits for RK_CRYPTO_HASH_STS to become idle after the

final DMA transfer, but ignores the poll result. If the hash engine

never becomes idle, the driver still reads the digest registers and

finalizes the request with the previous success value.

Store the poll result and finalize the request with the timeout error

before reading the digest registers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.4th percentile
Published
2026-09-17T21:18Z
References (5)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:11Z
    crypto: rk3288 - fail ahash requests on HASH idle timeout
    cvelistv5