PT-2026-90075
CVE-2026-80945
·
Published
2026-09-11
·
Updated
2026-09-21
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the Intel QuickAssist Accelerator (IAA) crypto component where a hardware analytics error during decompression triggers a software fallback. This fallback writes to the
req->dst variable using the CPU while the memory is still mapped as DMA FROM DEVICE. When SWIOTLB (Software Input Output Translation Lookaside Buffer), a mechanism used to handle DMA for devices that cannot access all physical memory, is active, the subsequent dma unmap sg() function call copies a stale bounce buffer over req->dst, leading to data corruption. The issue is addressed by ensuring the destination is unmapped before the fallback process begins, specifically within the iaa comp adecompress() function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾