In the Linux kernel, the following vulnerability has been resolved:
cxl/region: Validate partition index before array access
construct_region() reads cxled->part and uses it to index
cxlds->part[] without checking for a negative value. If the
partition was never resolved, part remains at its initial value
of -1, causing an out-of-bounds array access.
Add a guard to return -EBUSY when part is negative.
The check was dropped during a merge.
CVSS
No CVSS.
References
Configurations
No configuration.
History
24 Sep 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-24 17:17
Updated : 2026-09-25 13:17
NVD link : CVE-2026-97423
Mitre link : CVE-2026-97423
CVE.ORG link : CVE-2026-97423
JSON object : View
Products Affected
No product.
CWE
No CWE.