PT-2026-90075

CVE-2026-80945

·

تاريخ النشر

2026-09-11

·

تاريخ التحديث

2026-09-21

الوصف من

CVSS 3.1
9.1
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the Intel QuickAssist Accelerator (IAA) crypto component where a hardware analytics error during decompression triggers a software fallback. This fallback writes to the req->dst variable using the CPU while the memory is still mapped as DMA FROM DEVICE. When SWIOTLB (Software Input Output Translation Lookaside Buffer), a mechanism used to handle DMA for devices that cannot access all physical memory, is active, the subsequent dma unmap sg() function call copies a stale bounce buffer over req->dst, leading to data corruption. The issue is addressed by ensuring the destination is unmapped before the fallback process begins, specifically within the iaa comp adecompress() function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
OPENSUSE-SU-2026:11805-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾