PT-2024-7274

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux CXL subsystem, which assumes that the host physical address HPA is equal to the system physical address SPA. During HDM decoder setup, the DVSEC CXL...

kernel: Linux kernel CXL driver: Use-after-free vulnerability leading to system instability or privilege escalation

A flaw was found in the Linux kernel's CXL driver. This vulnerability, a use-after-free, allows a local user to cause system instability or a denial of service. The issue arises when the cxlparsecfmws function attempts to use memory that has already been released. This could potentially lead to...

PT-2024-14735

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the CXL subsystem in the Linux kernel, where a lineage of ports is established between an endpoint and the root of a CXL topology. When a port or memdev is remove...

PT-2023-9708

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the cxl region attach function in the Linux kernel, which can lead to a denial of service when cxl region setup targets fails. This failure prevents endpoint and...

PT-2023-9703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the cxl/mem component of the Linux kernel. This occurs when the cxl memdev unregister function is called, leading to a crash. The...

PT-2025-40186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the CXL driver within the Linux kernel, specifically in the cxl parse cfmws function. The problem occurs in the cxl decoder add fail path, where memory...

kernel: cxl/port: Hold port reference until decoder release

In the Linux kernel, the following vulnerability has been resolved: cxl/port: Hold port reference until decoder release KASAN + DEBUGKOBJECTRELEASE reports a potential use-after-free in cxldecoderrelease where it goes to reference its parent, a cxlport, to free its id back to port-decoderida. BUG...

PT-2023-35405 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0 through v6.1.11 Description: A null pointer dereference issue was discovered in the cxl/region decoder reset functionality. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

GSD-2023-1001591 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()

cxl: fix possible null-ptr-deref in cxlpciinitafu|adapter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001391 cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()

cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001390 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()

cxl: fix possible null-ptr-deref in cxlpciinitafu|adapter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001370 cxl: Fix refcount leak in cxl_calc_capp_routing

cxl: Fix refcount leak in cxlcalccapprouting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001077 cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()

cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001075 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()

cxl: fix possible null-ptr-deref in cxlpciinitafu|adapter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001050 cxl: Fix refcount leak in cxl_calc_capp_routing

cxl: Fix refcount leak in cxlcalccapprouting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000665 cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()

cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-34447

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.12 through v5.10.162 Description A refcount leak was discovered in the cxl calc capp routing function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v4.12...

PT-2023-34127

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.12 through v5.15.85 Description A refcount leak was discovered in the cxl calc capp routing function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v4.12...

PT-2023-33709

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.12 through v6.0.15 Description A refcount leak was discovered in the cxl calc capp routing function. The issue was introduced in version v4.12 and is fixed in version v6.0.16. Recommendations For Linux Kernel versions...

PT-2023-34467

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.18 through 5.10.162 Description A potential null pointer dereference issue was identified in the cxl pci init afu|adapter function. The actual impact and attack plausibility of this issue have not yet been proven...