CVE-2026-74277

A flaw was found in the Linux kernel's iommu/dma-iommu component. When handling PCI Peer-to-Peer Direct Memory Access (P2PDMA) cases, an incorrect assignment of the scatterlist length can cause all segments in a multi-segment scatterlist to inherit the length of the first segment. This leads to corrupted DMA lengths, which may result in data corruption during memory transfers.

This vulnerability is classified as having a Moderate impact because exploitation requires local access and specifically relies on configurations utilizing PCI Peer-to-Peer Direct Memory Access (P2PDMA). In standard enterprise deployments, direct peer-to-peer DMA transfers across PCIe endpoints are not widely used and cannot be initiated by unprivileged remote attackers. While incorrect scatterlist segment sizing can lead to transfer failures or denial of service via kernel instability, broader system compromise is bounded by the local hardware transaction requirements.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.