-

CVE-2026-97423

cxl/region: Validate partition index before array access

In the Linux kernel, the following vulnerability has been resolved:

cxl/region: Validate partition index before array access

construct_region() reads cxled->part and uses it to index
cxlds->part[] without checking for a negative value. If the
partition was never resolved, part remains at its initial value
of -1, causing an out-of-bounds array access.

Add a guard to return -EBUSY when part is negative.

The check was dropped during a merge.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version b6faa9c613787b894913638a76030018f6d62d54
Version < 06322da06116f1ee52271dd4d84dc69580087df7
Status affected
Version b6faa9c613787b894913638a76030018f6d62d54
Version < 16329b510f76e5b824e05bf8add8b29850f1f16f
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.15
Status affected
Version 0
Version < 6.15
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.04
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/06322da06116f1ee52271dd4d84dc69580087df7
https://git.kernel.org/stable/c/16329b510f76e5b824e05bf8add8b29850f1f16f