CVE-2026-74280

crypto: marvell/octeontx - fix DMA cleanup using wrong loop index

State: Published
Severity: 10.0 Critical
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: marvell/octeontx - fix DMA cleanup using wrong loop index

The sg_cleanup path used list[i] instead of list[j] when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	10b4f09491bfeb0b298cb2f49df585510ee6189a to before 97f150ba3e372256eabb93bd80c2cf3740077fb5Affected 10b4f09491bfeb0b298cb2f49df585510ee6189a to before 8a0db9fad3c97e6447a92417cb95d7c55eaa9530Affected 10b4f09491bfeb0b298cb2f49df585510ee6189a to before 8d301e5a51173ba56ce4f632a2a33bf6b14b0fcfAffected 10b4f09491bfeb0b298cb2f49df585510ee6189a to before ed374dbc70c10c4a864414b3d9c257faec8fd485Affected 10b4f09491bfeb0b298cb2f49df585510ee6189a to before 6c721a3e43344f8560ee4ef506fc1f72b4646dcdAffected 10b4f09491bfeb0b298cb2f49df585510ee6189a to before 5f99a396f706afc749448659d1565991330e4f71Affected 10b4f09491bfeb0b298cb2f49df585510ee6189a to before acff30cfc0d72465b51b0bfdf019f1cb54e15314Affected 10b4f09491bfeb0b298cb2f49df585510ee6189a to before 7891c64c0520519782470ba29bac8a5761e295d8Affected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

10b4f09491bfeb0b298cb2f49df585510ee6189a to before 97f150ba3e372256eabb93bd80c2cf3740077fb5Affected
10b4f09491bfeb0b298cb2f49df585510ee6189a to before 8a0db9fad3c97e6447a92417cb95d7c55eaa9530Affected
10b4f09491bfeb0b298cb2f49df585510ee6189a to before 8d301e5a51173ba56ce4f632a2a33bf6b14b0fcfAffected
10b4f09491bfeb0b298cb2f49df585510ee6189a to before ed374dbc70c10c4a864414b3d9c257faec8fd485Affected
10b4f09491bfeb0b298cb2f49df585510ee6189a to before 6c721a3e43344f8560ee4ef506fc1f72b4646dcdAffected
10b4f09491bfeb0b298cb2f49df585510ee6189a to before 5f99a396f706afc749448659d1565991330e4f71Affected
10b4f09491bfeb0b298cb2f49df585510ee6189a to before acff30cfc0d72465b51b0bfdf019f1cb54e15314Affected
10b4f09491bfeb0b298cb2f49df585510ee6189a to before 7891c64c0520519782470ba29bac8a5761e295d8Affected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.