CVE-2022-49896 cxl/pmem: Fix cxl_pmem_region and cxl_memdev leak

In the Linux kernel, the following vulnerability has been resolved: cxl/pmem: Fix cxlpmemregion and cxlmemdev leak When a cxlnvdimm object goes through a -remove event device physically removed, nvdimm-bridge disabled, or nvdimm device disabled, then any associated regions must also be disabled. ...

CVE-2022-49896

CVE-2022-49896 relates to the Linux kernel’s cxl/pmem subsystem. The issue: when a cxl_nvdimm object is removed, associated regions were not consistently disabled, because the driver tracked only one region per nvdimm device. This could leak regions and cause cxl_memdev reference leaks. The vulne...