> CVE-2026-97423

« BACK_TO_HOME
PUBLISHED
2026-09-24 17:17
MODIFIED
2026-09-24 17:17
EPSS (Prob. Exploit)
0.16%
Top 95.7%
DATA SOURCES:
NVD 🔗 2026-09-24 FIRST EPSS 🔗 2026-10-23 OSV 🔗 2026-09-30 MSRC 🔗 2026-09-29

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access construct_region() reads cxled->part and uses it to index cxlds->part[] without checking for a negative value. If the partition was never resolved, part remains at its initial value of -1, causing an out-of-bounds array access. Add a guard to return -EBUSY when part is negative. The check was dropped during a merge.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

cxl/region: Validate partition index before array access

AFFECTED PACKAGES:
Unknown / Unknown
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
24/09/2026 17:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 4 weeks ago

> REFERENCES

https://git.kernel.org/stable/c/06322da06116f1ee52271dd4d84dc69580087df7
https://git.kernel.org/stable/c/16329b510f76e5b824e05bf8add8b29850f1f16f
« BACK_TO_HOME