---
id: CVE-2026-74279
title: 'crypto: cavium/cpt - fix DMA cleanup using wrong loop index'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  crypto: cavium/cpt - fix DMA cleanup using wrong loop index

  The sg_cleanup error path used list[i] instead of list[j] when unmapping
  DMA buffers, leaking successfully …
severity: critical
cvss: 10
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 <
    23c6174e48f66fc10b998b0acdb406cb0caf5c80
  - >-
    Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 <
    23d3a7e896a1fe2d7a6bcb42f093948b79f8a198
  - >-
    Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 <
    28141f95ae93b18f9bfde953cb787fcb151fb9da
  - >-
    Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 <
    8afd1007ef79898a6e010eaade97097e49405fce
  - >-
    Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 <
    3b8a1e1f4e4071a62b20374028744e8cc8310d48
  - >-
    Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 <
    fb4d57b83356d4bd411b45ede3024e0ff42c9b5e
  - >-
    Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 <
    d319b83b97b3585550d9ae592dfa78c755b6129e
  - >-
    Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 <
    9dbf173bd32d5f81b005008b682bfb50aa093455
  - Linux 4.11
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-16T18:51:59.460893Z'
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:55:29.607Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-74279'
references:
  - url: 'https://git.kernel.org/stable/c/23c6174e48f66fc10b998b0acdb406cb0caf5c80'
  - url: 'https://git.kernel.org/stable/c/23d3a7e896a1fe2d7a6bcb42f093948b79f8a198'
  - url: 'https://git.kernel.org/stable/c/28141f95ae93b18f9bfde953cb787fcb151fb9da'
  - url: 'https://git.kernel.org/stable/c/8afd1007ef79898a6e010eaade97097e49405fce'
  - url: 'https://git.kernel.org/stable/c/3b8a1e1f4e4071a62b20374028744e8cc8310d48'
  - url: 'https://git.kernel.org/stable/c/fb4d57b83356d4bd411b45ede3024e0ff42c9b5e'
  - url: 'https://git.kernel.org/stable/c/d319b83b97b3585550d9ae592dfa78c755b6129e'
  - url: 'https://git.kernel.org/stable/c/9dbf173bd32d5f81b005008b682bfb50aa093455'
tags:
  - cve.org
epss: 0.00755
epssPercentile: 0.5421
ingestedAt: '2026-10-16T19:46:24.386Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

crypto: cavium/cpt - fix DMA cleanup using wrong loop index

The sg_cleanup error path used list[i] instead of list[j] when unmapping
DMA buffers, leaking successfully mapped entries and repeatedly unmapping
the failed one.

## Affected

- `Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 < 23c6174e48f66fc10b998b0acdb406cb0caf5c80`
- `Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 < 23d3a7e896a1fe2d7a6bcb42f093948b79f8a198`
- `Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 < 28141f95ae93b18f9bfde953cb787fcb151fb9da`
- `Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 < 8afd1007ef79898a6e010eaade97097e49405fce`
- `Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 < 3b8a1e1f4e4071a62b20374028744e8cc8310d48`
- `Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 < fb4d57b83356d4bd411b45ede3024e0ff42c9b5e`
- `Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 < d319b83b97b3585550d9ae592dfa78c755b6129e`
- `Linux >= c694b233295b99c33dd5ac28aede9f171f5a6862 < 9dbf173bd32d5f81b005008b682bfb50aa093455`
- `Linux 4.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.