CVE-2026-74274

A flaw was found in the Linux kernel's CXL Compute Express Link driver. When endpoint decoders are removed from a CXL region's target array, the driver can fail to properly fill the resulting NULL pointer holes. This can lead to the system attempting to access a NULL pointer, causing a general...

EUVD-2026-59421

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fill first free targets slot during auto-discovery Any invalid endpoint decoder pointer in the target array of an active region is not allowed by cxl driver. This means cxl driver always assumes the first p-nrtargets...

CVE-2026-74274

The CVE-2026-74274 entry concerns the Linux kernel cxl/region auto-discovery logic. A NULL hole in a region’s target array (introduced when an endpoint decoder is removed or detached) could lead to null dereferences (possible Oops: general protection fault) or miscounting targets when lock flags ...

PT-2026-72710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CXL driver where NULL endpoint decoder pointer holes can be left in the target array of an active auto-assembly region. This occurs when cxl cancel auto attach...