The fault lies in the Cavium CPT crypto driver’s DMA buffer cleanup routine. Instead of using the intended index, the routine references list[i] where list[j] was expected, leaving newly mapped DMA entries unreleased while repeatedly unmapping the failed entry. This mismanagement, identified as improper handling of resource deallocation (CWE-772), can lead to kernel memory exhaustion or corruption, potentially causing a denial of service for processes that depend on the driver or the kernel itself. Based on the description, it is inferred that an attacker would need to trigger the driver error path, which could potentially be done by corrupting network traffic that uses the CPT driver.

This vulnerability impacts the Linux kernel’s Cavium CPT crypto driver. No specific version range is provided, so any kernel release that contains the unpatched driver code is at risk. Administrators should check the kernel version and confirm whether the driver includes the fix commit. Based on the lack of an explicit affected version list, we infer that all kernel releases that contain the unpatched driver are affected.

The CVSS score is 10. The EPSS score indicates a very low exploitation probability (< 1%). This vulnerability is not listed in the CISA KEV catalog. If the faulty cleanup path can be triggered (for example, during driver error handling), the driver may leak DMA descriptors, eventually exhausting available resources and causing the kernel to crash or restart. Because of the lack of known exploits and the low EPSS score, the overall risk is low but a patch remains advisable. The likely attack vector is inferred to be the driver error handling path, which requires triggering an error state within the driver.