UBUNTU-CVE-2026-80945: Critical severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retries through the software fallback, which writes req->dst with the CPU while it is still mapped DMAFROMDEVICE. With SWIOTLB active the later dmaunmapsg() copies the stale bounce buffer over req->dst, corrupting the result. Unmap before the fallback runs. The async path unmaps inline; the sync path signals the retry with -EAGAIN so iaacompadecompress() runs the fallback after unmapping.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Unmap req->dst before running the software decompression fallback after a hardware analytics error; ensure the DMA_FROM_DEVICE mapping is released before the CPU writes the destination.
Linux kernel crypto: iaa decompression DMA mapping before software fallback = unmap destination before fallback