CVE-2026-74495

Received Received - Intake

igbvf TX DMA Error Cleanup Leak in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always match the correct number of unmappings needed when dma_error is reached. Decrementing count before the while loop in dma_error causes an off-by-one error. If any mapping was successful before an unsuccessful mapping, exactly one DMA mapping (the head) would leak. This bug was introduced by a 2010 fix for an endless loop in dma_error. All other affected drivers have already been fixed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-19

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74495

EUVD

EUVD-2026-59688

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a memory leak vulnerability in the Linux kernel's igbvf driver. When an error occurs during TX DMA buffer mapping, the driver fails to properly unmap buffers that were already mapped for a socket buffer (skb). The issue stems from an incorrect decrement of a counter before cleanup, causing one DMA mapping to leak if any prior mappings succeeded.

Detection Guidance

This vulnerability is specific to the Linux kernel's igbvf driver and involves a DMA mapping leak during TX errors. Detection requires kernel-level monitoring for DMA mapping errors or leaks in the igbvf driver. Check kernel logs for DMA-related errors using dmesg or journalctl. No direct commands are provided in the context to detect this issue.

Impact Analysis

The vulnerability could lead to resource exhaustion, as leaked DMA mappings consume system memory. This may cause performance degradation or system instability, particularly under heavy network traffic where the affected driver is used.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level driver issue in the Linux kernel related to memory management during TX DMA errors, which could lead to resource leaks but does not involve data exposure or privacy violations.

Mitigation Strategies

Apply the latest Linux kernel updates that include the fix for this vulnerability. If using a vulnerable kernel version, avoid triggering TX DMA errors in the igbvf driver. Monitor kernel logs for DMA errors and update affected drivers if available.

Hi! I’m here to help you understand CVE-2026-74495. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70