CVE-2026-97423 cxl/region: Validate partition index before array access

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423

The Linux kernel contains a vulnerability in the cxl/region component where the construct_region() function fails to validate the cxled->part value before using it as an index for the cxlds->part[] array. If a partition is never resolved, the value remains at -1 , leading to an out-of-bound...

Linux Distros Unpatched Vulnerability : CVE-2026-97423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value...

EUVD-2026-59422

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxlcancelautoattach In cxlcancelautoattach, it assumes cxled-pos is a valid index for accessing p-targets. However, cxled-pos can be set to negative errno in cxlregionsorttargets if...