CVE-2026-80945

A flaw was found in the Linux kernel's cryptography module, specifically within the Intel Analytics Accelerator (IAA) driver. When a hardware error occurs during data decompression, the system attempts to use a software-based fallback. However, due to improper handling of memory buffers during this fallback, particularly when the Software I/O Translation Lookaside Buffer (SWIOTLB) is active, the decompression process can corrupt the resulting data. This could lead to data integrity issues for a local user or process.

A data corruption issue in the Intel IAA crypto decompression path occurs when the software fallback runs while req dst is still mapped DMA_FROM_DEVICE. With SWIOTLB enabled, dma_unmap_sg can later copy stale bounce buffer contents over the CPU written fallback output, corrupting the decompressed result. For the CVSS the PR:L is used because practical triggering requires a local user or local process able to drive a kernel crypto consumer that uses the deflate iaa decompressor. The issue is not directly network reachable from the patch context. Impact is primarily integrity loss of decompressed data and possible denial of service if corrupted output breaks a kernel consumer. For the paranoid score, the highest still defensible interpretation is C:L/I:L/A:H because stale DMA data may affect returned decompression output, but the patch does not show a UAF, OOB write, or arbitrary write primitive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.