CVE-2026-74273

cxl/region: Block region delete during region creation

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Oct 21, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

cxl/region: Block region delete during region creation

Expand the range lock, rename it "regions_lock", to disable region deletion in the critical period between construct_region() and attach_target(), as well as the period between device_add() and registering the remove actions.

Otherwise, userspace can confuse the kernel. It can violate the assumption the region stays registered through the completion of cxl_add_to_region(). It can violate the assumption that devm_add_action_or_reset() is working with a live 'struct cxl_region'.

It is ok for the region to disappear outside of those windows as that mirrors device hotplug flows where the proper locks are held.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a32320b71f085f8d82afedcf285f1682c8c00aed to before 8efa9fcc1d31b29b31e0ac4efe48624a729796bcAffected a32320b71f085f8d82afedcf285f1682c8c00aed to before ecc86a28dc27509da511bb3f8c309750233e3177Affected a32320b71f085f8d82afedcf285f1682c8c00aed to before 98c7e206af48b4433b2192cc1a538db2acc49876Affected a32320b71f085f8d82afedcf285f1682c8c00aed to before b0b6a9c65cb72c901fdcc6ae83d7afd70cdca1b8Affected a32320b71f085f8d82afedcf285f1682c8c00aed to before d91feb88692e81b00cd22f0125cfcd04970b4a0bAffected
LinuxLinux	6.3Affected before 6.3Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

a32320b71f085f8d82afedcf285f1682c8c00aed to before 8efa9fcc1d31b29b31e0ac4efe48624a729796bcAffected
a32320b71f085f8d82afedcf285f1682c8c00aed to before ecc86a28dc27509da511bb3f8c309750233e3177Affected
a32320b71f085f8d82afedcf285f1682c8c00aed to before 98c7e206af48b4433b2192cc1a538db2acc49876Affected
a32320b71f085f8d82afedcf285f1682c8c00aed to before b0b6a9c65cb72c901fdcc6ae83d7afd70cdca1b8Affected
a32320b71f085f8d82afedcf285f1682c8c00aed to before d91feb88692e81b00cd22f0125cfcd04970b4a0bAffected

LinuxLinux

6.3Affected
before 6.3Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.