SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-74495

CRITICAL · CVSS 9.8 EPSS 0.51%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The igbvf driver in the Linux kernel contains a vulnerability that can lead to a memory leak during TX DMA error cleanup, specifically when handling buffer mappings. This issue arises from an off-by-one error in the error handling logic, which may result in one DMA mapping not being properly unmapped if a mapping fails after a successful one. Organizations using affected Linux kernel versions should prioritize addressing this vulnerability to prevent potential resource exhaustion and maintain system stability.

CVE
CVE-2026-74495
Severity
CRITICAL
CVSS
9.8
EPSS
0.51%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always match the correct number of unmappings needed when dma_error is reached. Decrementing count before the while loop in dma_error causes an off-by-one error. If any mapping was successful before an unsuccessful mapping, exactly one DMA mapping (the head) would leak. This bug was introduced by a 2010 fix for an endless loop in dma_error. All other affected drivers have already been fixed.