CVE Catalog
CVE-2026-74279
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk0.18%
7th percentile - higher than 7% of all known CVEs
Summary
In the Linux kernel Cavium CPT crypto driver, the DMA cleanup error path used the wrong loop index, leaking mapped entries and repeatedly unmapping the failed one.
Risk Assessment
DMA memory management errors can lead to memory leaks or malfunction of cryptographic hardware, potentially affecting data integrity.
Recommendation
Apply the Linux kernel update that fixes the indexing in the sg_cleanup function.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sg_cleanup error path used list[i] instead of list[j] when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one.