In the Marvell Octeontx crypto driver within the Linux kernel, the DMA cleanup routine mistakenly used the same index for both mapping and unmapping. This caused actively mapped DMA buffers to remain mapped on the hardware and the intended buffer to be repeatedly unmapped, leaving map entries in a leaked state. The leak can expose data residing in those buffers, potentially allowing a privileged user to read protected memory. This issue represents the weakness identified by CWE-1285, all of which relate to improper resource management and leaks.

All Linux kernel builds that include the Marvell Octeontx crypto driver and have not yet incorporated the patch are affected. No explicit version boundaries are given, so any kernel prior to the specific commits referenced in the provided Git links should be considered vulnerable.

The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, suggesting limited publicly known exploitation. Based on the description, it is inferred that an attacker would need local privileges to interact with the driver. The likely attack vector is local, requiring the ability to trigger the cleanup routine. The CVSS score of 10 indicates a critical risk, emphasizing potential for confidential data leakage especially for systems that handle sensitive information with the Marvell Octeontx crypto driver.