PT-2026-90075

CVE-2026-80945

·

Published

2026-09-11

·

Updated

2026-09-21

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the Intel QuickAssist Accelerator (IAA) crypto component where a hardware analytics error during decompression triggers a software fallback. This fallback writes to the req->dst variable using the CPU while the memory is still mapped as DMA FROM DEVICE. When SWIOTLB (Software Input Output Translation Lookaside Buffer), a mechanism used to handle DMA for devices that cannot access all physical memory, is active, the subsequent dma unmap sg() function call copies a stale bounce buffer over req->dst, leading to data corruption. The issue is addressed by ensuring the destination is unmapped before the fallback process begins, specifically within the iaa comp adecompress() function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2026:11805-1
Found an issue in the description? Have something to add? Feel free to write us 👾