Vulnerability details
CVE-2026-74495
Linux Linux
igbvf: Fix leak in TX DMA error cleanup
CVSS 3.1
9.8Critical
Official description
In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always match the correct number of unmappings needed when dma_error is reached. Decrementing count before the while loop in dma_error causes an off-by-one error. If any mapping was successful before an unsuccessful mapping, exactly one DMA mapping (the head) would leak. This bug was introduced by a 2010 fix for an endless loop in dma_error. All other affected drivers have already been fixed.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.8Critical | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 2.6.33 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c1fa347f20f17f14a4a1575727fa24340e8a9117 ≤ v < e3ed89c257f6361f13df23023cd10ace830330ad | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c1fa347f20f17f14a4a1575727fa24340e8a9117 ≤ v < 56726ff12cb6759ab90d6f5332c2377aeca7d249 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c1fa347f20f17f14a4a1575727fa24340e8a9117 ≤ v < 31089f4eab42e0fc248ec80c26f9b0bad59ba4cc | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c1fa347f20f17f14a4a1575727fa24340e8a9117 ≤ v < e42b7225c45f57b42306b80cdd3bda202bae7293 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c1fa347f20f17f14a4a1575727fa24340e8a9117 ≤ v < 845a9cdd9b03b7b6fa8de3ee80579780350a7f65 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c1fa347f20f17f14a4a1575727fa24340e8a9117 ≤ v < df07003b5a6c6c9fce60d765d6a3da815a74c41c | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c1fa347f20f17f14a4a1575727fa24340e8a9117 ≤ v < 0565052b7e2f436b7f1541f4849da96dc0aa7a0e | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c1fa347f20f17f14a4a1575727fa24340e8a9117 ≤ v < bc25d56c03e41c10bc4b40e99ca5d7b941675c04 | CVEProject cvelistV5 (CNA) |
References and advisories
8- https://git.kernel.org/stable/c/e42b7225c45f57b42306b80cdd3bda202bae7293
- https://git.kernel.org/stable/c/e3ed89c257f6361f13df23023cd10ace830330ad
- https://git.kernel.org/stable/c/56726ff12cb6759ab90d6f5332c2377aeca7d249
- https://git.kernel.org/stable/c/31089f4eab42e0fc248ec80c26f9b0bad59ba4cc
- https://git.kernel.org/stable/c/bc25d56c03e41c10bc4b40e99ca5d7b941675c04
- https://git.kernel.org/stable/c/845a9cdd9b03b7b6fa8de3ee80579780350a7f65
- https://git.kernel.org/stable/c/df07003b5a6c6c9fce60d765d6a3da815a74c41c
- https://git.kernel.org/stable/c/0565052b7e2f436b7f1541f4849da96dc0aa7a0e
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-08-15
- Last updated
- 2026-10-16
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.51%
Probability of exploitation in 30 days
44%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- —