CVE-2026-31719 is a vulnerability in the Linux kernel's krb5enc crypto module where asynchronous decryption skips hash verification, leading to bypass of integrity checks. This occurs because the async decrypt callback directly signals completion without performing the hash check, unlike the encrypt path which correctly chains callbacks. The issue also involves improper handling of EBUSY and EINPROGRESS error codes. The vulnerability has been fixed by introducing an intermediate callback to ensure hash verification is performed on async decrypt completion and correcting error handling.