CVE-2026-74280: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
In the Linux kernel, the following vulnerability has been resolved:
crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
The sgcleanup path used list[i] instead of list[j] when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Upgrade the Linux kernel to a version where the sg_cleanup DMA unmap bug (“fix DMA cleanup using wrong loop index”) is resolved so the wrong loop index (list[i] vs list[j]) no longer causes leaked successfully mapped entries and repeated unmapping.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74280?
CVE-2026-74280 has a risk rating of 27, indicating a significant vulnerability in the Linux kernel.
How do I fix CVE-2026-74280?
To fix CVE-2026-74280, ensure that you update your Linux kernel to the patched version that corrects the DMA cleanup process.
What systems are affected by CVE-2026-74280?
CVE-2026-74280 affects systems running the Linux kernel with the Marvell OcteonTX crypto driver.
What are the potential impacts of CVE-2026-74280?
CVE-2026-74280 can lead to memory leaks and instability in systems utilizing the vulnerable DMA unmapping process.
Is CVE-2026-74280 currently being exploited in the wild?
As of now, there is no public information indicating that CVE-2026-74280 is actively being exploited.