Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cxl: fixed a possible null-ptr-deref in cxlpciinitafu|adapter. If deviceregister fails in cxlpciafu|adapter, the device is not added. In this case, deviceunregister cannot be called in the error path. Otherwise, a null-ptr-deref...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cxl/port: Hold a reference to the port until the decoder is released. KASAN + DEBUGKOBJECTRELEASE reports a potential use-after-free in cxldecoderrelease. This function references its parent object, a cxlport, to free its id back...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Do not attempt cleanup after a failure in cxlRegionAttach. The commit 5e42bcbc3fef “cxl/region: decrement -nrtargets on error in cxlRegionAttach” attempted to avoid initialization errors when -nrtargets exceeds 16 by...

CVE-2026-97423

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. This vulnerability allows a local user to cause a Denial of Service DoS or system instability through an out-of-bounds memory access. During CXL region configuration, the kernel fails to validate that the partition index i...

MiracleLinux 9 : kernel-5.14.0-687.38.1.el9_8 (AXSA:2026-1922:85)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1922:85 advisory. kernel: cxl/port: Fix use after free of parentport in cxldetachep CVE-2026-31530 kernel: xen: AMD Zen 2 Processors: Privilege escalation via imprope...

SUSE CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

DEBIAN-CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

AZL-103835 CVE-2026-97423 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

UBUNTU-CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

EUVD-2026-86036

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423 cxl/region: Validate partition index before array access

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423

The Linux kernel contains a vulnerability in the cxl/region component where the construct_region() function fails to validate the cxled->part value before using it as an index for the cxlds->part[] array. If a partition is never resolved, the value remains at -1 , leading to an out-of-bound...

CVE-2026-97423 cxl/region: Validate partition index before array access

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

PT-2026-104942

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access construct region reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial...

PT-2026-98057

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access occurs in the construct region function. The function reads the cxled-part variable and uses it to index the cxlds-part array without verifying if the value...

Linux Distros Unpatched Vulnerability : CVE-2026-97423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value...

SUSE CVE-2026-93096

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Serialize multi-part Get/Set Feature transfers A Get or Set Feature payload larger than the mailbox payload size is split into several mailbox commands. mboxmutex only serializes individual mailbox commands and is...