CVE-2026-80945 crypto: iaa - unmap dst before software fallback on decompress
A Linux kernel bug in the IAA crypto driver causes memory corruption during decompression fallback when SWIOTLB is active, potentially leading to data modification or system crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80945?
CVE-2026-80945 is a critical memory corruption vulnerability in Linux, published on 11 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
crypto: iaa - unmap dst before software fallback on decompress
On a hardware analytics error, decompress retries through the software fallback, which writes req->dst with the CPU while it is still mapped DMA_FROM_DEVICE. With SWIOTLB active the later dma_unmap_sg() copies the stale bounce buffer over req->dst, corrupting the result.
Unmap before the fallback runs. The async path unmaps inline; the sync path signals the retry with -EAGAIN so iaa_comp_adecompress() runs the fallback after unmapping.
Which versions are affected by CVE-2026-80945?
How do I fix CVE-2026-80945?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-80945 being exploited?
There is no known exploitation of CVE-2026-80945 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-80945, DEBIAN-CVE-2026-80945, GHSA-p5w3-q665-q5v8, UBUNTU-CVE-2026-80945.