CVE-2026-80945

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - unmap dst before software fallback on decompress

On a hardware analytics error, decompress retries through the software

fallback, which writes req->dst with the CPU while it is still mapped

DMA_FROM_DEVICE. With SWIOTLB active the later dma_unmap_sg() copies the

stale bounce buffer over req->dst, corrupting the result.

Unmap before the fallback runs. The async path unmaps inline; the sync

path signals the retry with -EAGAIN so iaa_comp_adecompress() runs the

fallback after unmapping.