CVE-2026-74279

crypto: cavium/cpt - fix DMA cleanup using wrong loop index

State: Published
Severity: 10.0 Critical
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: cavium/cpt - fix DMA cleanup using wrong loop index

The sg_cleanup error path used list[i] instead of list[j] when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c694b233295b99c33dd5ac28aede9f171f5a6862 to before 23c6174e48f66fc10b998b0acdb406cb0caf5c80Affected c694b233295b99c33dd5ac28aede9f171f5a6862 to before 23d3a7e896a1fe2d7a6bcb42f093948b79f8a198Affected c694b233295b99c33dd5ac28aede9f171f5a6862 to before 28141f95ae93b18f9bfde953cb787fcb151fb9daAffected c694b233295b99c33dd5ac28aede9f171f5a6862 to before 8afd1007ef79898a6e010eaade97097e49405fceAffected c694b233295b99c33dd5ac28aede9f171f5a6862 to before 3b8a1e1f4e4071a62b20374028744e8cc8310d48Affected c694b233295b99c33dd5ac28aede9f171f5a6862 to before fb4d57b83356d4bd411b45ede3024e0ff42c9b5eAffected c694b233295b99c33dd5ac28aede9f171f5a6862 to before d319b83b97b3585550d9ae592dfa78c755b6129eAffected c694b233295b99c33dd5ac28aede9f171f5a6862 to before 9dbf173bd32d5f81b005008b682bfb50aa093455Affected
LinuxLinux	4.11Affected before 4.11Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

c694b233295b99c33dd5ac28aede9f171f5a6862 to before 23c6174e48f66fc10b998b0acdb406cb0caf5c80Affected
c694b233295b99c33dd5ac28aede9f171f5a6862 to before 23d3a7e896a1fe2d7a6bcb42f093948b79f8a198Affected
c694b233295b99c33dd5ac28aede9f171f5a6862 to before 28141f95ae93b18f9bfde953cb787fcb151fb9daAffected
c694b233295b99c33dd5ac28aede9f171f5a6862 to before 8afd1007ef79898a6e010eaade97097e49405fceAffected
c694b233295b99c33dd5ac28aede9f171f5a6862 to before 3b8a1e1f4e4071a62b20374028744e8cc8310d48Affected
c694b233295b99c33dd5ac28aede9f171f5a6862 to before fb4d57b83356d4bd411b45ede3024e0ff42c9b5eAffected
c694b233295b99c33dd5ac28aede9f171f5a6862 to before d319b83b97b3585550d9ae592dfa78c755b6129eAffected
c694b233295b99c33dd5ac28aede9f171f5a6862 to before 9dbf173bd32d5f81b005008b682bfb50aa093455Affected

LinuxLinux

4.11Affected
before 4.11Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.