Memory Corruption in Linux Kernel Crypto Component Affecting Intel QAT Driver

CVE-2026-46081

What is CVE-2026-46081?

A vulnerability in the Linux kernel affects its crypto component, particularly when dealing with asynchronous requests utilizing the Intel QuickAssist Technology (QAT) driver. The issue arises in the acomp_save_req() function, where the wrong pointer is stored, leading to memory corruption during asynchronous request completion. When the acomp_reqchain_done() callback is invoked improperly due to the incorrect pointer, it results in errors such as general protection faults. The problem is specifically observed when using the DMA virtual address interface in conjunction with asynchronous hardware implementations. This vulnerability has been addressed by correcting the pointer logic within the kernel functions to ensure the correct handling of request chains.

References