CVE-2026-92484

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix use-after-free in find_pos_and_ways() error path The error path releases its reference to a switch decoder before logging an error that includes the decoder name. If the released reference is the last one, the decoder can be freed before the error message accesses its name. Drop the reference after the error is reported.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-09-17 17:17:50.473000

Last modified

2026-10-19 09:19:38.700000

View original CVE JSON

{
  "id": "CVE-2026-92484",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-09-17T17:17:50.473",
  "lastModified": "2026-10-19T09:19:38.700",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/region: Fix use-after-free in find_pos_and_ways() error path\n\nThe error path releases its reference to a switch decoder before\nlogging an error that includes the decoder name. If the released\nreference is the last one, the decoder can be freed before the error\nmessage accesses its name.\n\nDrop the reference after the error is reported."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/cxl/core/region.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "9d90ab45d3d393532b7fa62d6a6b7ebbde9cf5fc",
              "lessThan": "68edf359b0b45cad2654510c1ca257079b241aa5",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "b3dc5c735a754142831f705068fcfa77551724ff",
              "lessThan": "b38ca9ce8c7d9b8151bb9e4770404c5e39600a48",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "d90acdf49e18029cfe4194475c45ef143657737a",
              "lessThan": "f54b96e8aadbfc7f2a1b26df349ef9b062c47d2e",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "d90acdf49e18029cfe4194475c45ef143657737a",
              "lessThan": "8f7683ce37a53eeabd721941517341d2eef2cf3c",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "d90acdf49e18029cfe4194475c45ef143657737a",
              "lessThan": "15da704b732332cc1e8f121f624e5e6c05124c5d",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "8ad454d3050a40fd616d481e48d1aebb27d9951e",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "6.6.96",
              "lessThan": "6.6.157",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "6.12.36",
              "lessThan": "6.12.110",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "6.15.5",
              "lessThan": "6.16",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/cxl/core/region.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.16",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.16",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.157",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.110",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.52",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.6",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/15da704b732332cc1e8f121f624e5e6c05124c5d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/68edf359b0b45cad2654510c1ca257079b241aa5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8f7683ce37a53eeabd721941517341d2eef2cf3c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b38ca9ce8c7d9b8151bb9e4770404c5e39600a48",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f54b96e8aadbfc7f2a1b26df349ef9b062c47d2e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}