Riskcovery

CVE-2026-97423

cxl/region: Validate partition index before array access

State
Published
Severity
Not scored
Published
Sep 24, 2026
Updated
Sep 25, 2026
Reserved
Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cxl/region: Validate partition index before array access

construct_region() reads cxled->part and uses it to index cxlds->part[] without checking for a negative value. If the partition was never resolved, part remains at its initial value of -1, causing an out-of-bounds array access.

Add a guard to return -EBUSY when part is negative.

The check was dropped during a merge.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b6faa9c613787b894913638a76030018f6d62d54 to before 06322da06116f1ee52271dd4d84dc69580087df7Affected
  • b6faa9c613787b894913638a76030018f6d62d54 to before 16329b510f76e5b824e05bf8add8b29850f1f16fAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.