CVE-2026-46081

kernel: crypto: acomp - fix wrong pointer stored by acomp_save_req()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's asynchronous compression (acomp) subsystem. When an asynchronous hardware implementation, such as the QAT driver, completes a request that uses the DMA virtual address interface, an incorrect pointer is stored. This leads to memory corruption within the acomp_reqchain_done() function, which can result in a denial of service (DoS) due to a general protection fault.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')