Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-92484

cxl/region: Fix use-after-free in find_pos_and_ways() error path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix use-after-free in find_pos_and_ways() error path The error path releases its reference to a switch decoder before logging an error that includes the decoder name. If the released reference is the last one, the decoder can be freed before the error message accesses its name. Drop the reference after the error is reported.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9d90ab45d3d393532b7fa62d6a6b7ebbde9cf5fc to < 68edf359b0b45cad2654510c1ca257079b241aa5affected
  • b3dc5c735a754142831f705068fcfa77551724ff to < b38ca9ce8c7d9b8151bb9e4770404c5e39600a48affected
  • d90acdf49e18029cfe4194475c45ef143657737a to < f54b96e8aadbfc7f2a1b26df349ef9b062c47d2eaffected
  • d90acdf49e18029cfe4194475c45ef143657737a to < 8f7683ce37a53eeabd721941517341d2eef2cf3caffected
  • d90acdf49e18029cfe4194475c45ef143657737a to < 15da704b732332cc1e8f121f624e5e6c05124c5daffected
  • 8ad454d3050a40fd616d481e48d1aebb27d9951eaffected
  • 6.6.96 to < 6.6.157affected
  • 6.12.36 to < 6.12.110affected
  • 6.15.5 to < 6.16affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References