CVE-2026-80945

Critical

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retries through the software fallback, which writes req->dst with the CPU while it is still mapped DMA_FROM_DEVICE. With SWIOTLB active the later dma_unmap_sg() copies the stale bounce buffer over req->dst, corrupting the result. Unmap before the fallback runs. The async path unmaps inline; the sync path signals the retry with -EAGAIN so iaa_comp_adecompress() runs the fallback after unmapping.

SeverityCritical

CVSS9.1

Exploit probability—

Product

Linux

PublishedSep 11, 2026

First seenSep 11, 2026

How to fix

Update

Linux Linuxc0279e5ea2aad99d8b91f1a6579d751cc9eb2408, fc933a4a419ba8a75da28666a018602c44846953, fcd86180ef78b0e41763faef7c6d2de7dfb50c1a, 94a25930477113730372e0fa2985da4c5ac95c9a or later

Affected products

Product	Affected versions	Fixed in
Linux Linux	2ec6761df889fdf896fde761abd447596dd8f8c2 ≤ v < c0279e5ea2aad99d8b91f1a6579d751cc9eb2408, 2ec6761df889fdf896fde761abd447596dd8f8c2 ≤ v < fc933a4a419ba8a75da28666a018602c44846953, 2ec6761df889fdf896fde761abd447596dd8f8c2 ≤ v < fcd86180ef78b0e41763faef7c6d2de7dfb50c1a, 2ec6761df889fdf896fde761abd447596dd8f8c2 ≤ v < 94a25930477113730372e0fa2985da4c5ac95c9a, 6.8	c0279e5ea2aad99d8b91f1a6579d751cc9eb2408, fc933a4a419ba8a75da28666a018602c44846953, fcd86180ef78b0e41763faef7c6d2de7dfb50c1a, 94a25930477113730372e0fa2985da4c5ac95c9a

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.