CVE-2026-80945

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - unmap dst before software fallback on decompress

On a hardware analytics error, decompress retries through the software

fallback, which writes req->dst with the CPU while it is still mapped

DMAFROMDEVICE. With SWIOTLB active the later dmaunmapsg() copies the

stale bounce buffer over req->dst, corrupting the result.

Unmap before the fallback runs. The async path unmaps inline; the sync

path signals the retry with -EAGAIN so iaacompadecompress() runs the

fallback after unmapping.