9.1

CVE-2026-80945

crypto: iaa - unmap dst before software fallback on decompress

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - unmap dst before software fallback on decompress

On a hardware analytics error, decompress retries through the software
fallback, which writes req->dst with the CPU while it is still mapped
DMA_FROM_DEVICE. With SWIOTLB active the later dma_unmap_sg() copies the
stale bounce buffer over req->dst, corrupting the result.

Unmap before the fallback runs. The async path unmaps inline; the sync
path signals the retry with -EAGAIN so iaa_comp_adecompress() runs the
fallback after unmapping.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 2ec6761df889fdf896fde761abd447596dd8f8c2
Version < c0279e5ea2aad99d8b91f1a6579d751cc9eb2408
Status affected
Version 2ec6761df889fdf896fde761abd447596dd8f8c2
Version < fc933a4a419ba8a75da28666a018602c44846953
Status affected
Version 2ec6761df889fdf896fde761abd447596dd8f8c2
Version < fcd86180ef78b0e41763faef7c6d2de7dfb50c1a
Status affected
Version 2ec6761df889fdf896fde761abd447596dd8f8c2
Version < 94a25930477113730372e0fa2985da4c5ac95c9a
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.8
Status affected
Version 0
Version < 6.8
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.394
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/fc933a4a419ba8a75da28666a018602c44846953
https://git.kernel.org/stable/c/fcd86180ef78b0e41763faef7c6d2de7dfb50c1a
https://git.kernel.org/stable/c/94a25930477113730372e0fa2985da4c5ac95c9a
https://git.kernel.org/stable/c/c0279e5ea2aad99d8b91f1a6579d751cc9eb2408