CVE-2026-93156: crypto: rk3288 - fail ahash requests on HASH idle timeout
In the Linux kernel, the following vulnerability has been resolved:
crypto: rk3288 - fail ahash requests on HASH idle timeout
rkhashrun() waits for RKCRYPTOHASHSTS to become idle after the final DMA transfer, but ignores the poll result. If the hash engine never becomes idle, the driver still reads the digest registers and finalizes the request with the previous success value.
Store the poll result and finalize the request with the timeout error before reading the digest registers.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel's rk3288 cryptographic hash driver are exposed when the hardware hash engine fails to become idle after a final DMA transfer. The provided data does not identify affected kernel versions or configurations.
What must occur for the incorrect success result to be returned?
The RK3288 hash engine must fail to reach the idle state while rk_hash_run() is polling after the final DMA transfer. In that condition, the vulnerable driver can read digest registers and finalize the hash request using its prior success status instead of reporting the timeout.
How can administrators determine whether they may be affected?
Review whether the running kernel includes the rk3288 crypto hash driver and whether its rk_hash_run() path propagates a HASH idle polling timeout before reading digest registers. The referenced stable commits contain the resolved behavior.