CVE-2026-31739

A flaw was found in the Linux kernel's tegra crypto driver. The driver failed to correctly set a flag for its asynchronous cryptographic algorithms. This oversight could lead to the crypto API selecting asynchronous algorithms when a user specifically requests synchronous ones. Consequently, this mismatch can cause system crashes, resulting in a Denial of Service (DoS).

This vulnerability is rated as having a Moderate impact because exploitation requires local access, and the resulting failure causes a kernel panic leading to denial of service without compromising data confidentiality or system integrity. The flaw is limited strictly to platforms running NVIDIA Tegra hardware where the Tegra Security Engine driver is active, leaving standard enterprise server deployments on other architectures unaffected. Local unprivileged or privileged access to the kernel cryptographic subsystem is required to trigger the invalid algorithm dispatch.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.