CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's crypto subsystem, specifically in the IAA decompression process, where a failure to unmap the destination buffer before a software fallback can lead to data corruption. This issue arises when the system attempts to decompress data after a hardware error, resulting in stale data being written to the destination buffer due to improper handling of DMA mappings. Organizations using Linux systems, particularly those relying on the crypto functionalities, should prioritize addressing this vulnerability to prevent potential data integrity issues.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retries through the software fallback, which writes req->dst with the CPU while it is still mapped DMA_FROM_DEVICE. With SWIOTLB active the later dma_unmap_sg() copies the stale bounce buffer over req->dst, corrupting the result. Unmap before the fallback runs. The async path unmaps inline; the sync path signals the retry with -EAGAIN so iaa_comp_adecompress() runs the fallback after unmapping.