← All Advisories
Reported from OT-Advisories.com as of

CVE-2026-31739

Last refreshed2026-10-17

Status: UPDATED  |  Advisory ID: CVE-2026-31739

Key Details

CVECVE-2026-31739
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-16
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Linux Kernel
Classified as
CWE-617 (Reachable Assertion)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

crypto: tegra - Add missing CRYPTO_ALG_ASYNC

The tegra crypto driver failed to set the CRYPTO_ALG_ASYNC on its

asynchronous algorithms, causing the crypto API to select them for users

that request only synchronous algorithms. This causes crashes (at

least). Fix this by adding the flag like what the other drivers do.

Also remove the unnecessary CRYPTO_ALG_TYPE_* flags, since those just

get ignored and overridden by the registration function anyway. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-31739
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-31739

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.