CVE-2026-74273cxl/region: Block region delete during region creation
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Block region delete during region creation Expand the range lock, rename it "regions_lock", to disable region deletion in the critical period between construct_region() and attach_target(), as well as the period between device_add() and registering the remove actions. Otherwise, userspace can confuse the kernel. It can violate the assumption the region stays registered through the completion of cxl_add_to_region(). It can violate the assumption that devm_add_action_or_reset() is working with a live 'struct cxl_region'. It is ok for the region to disappear outside of those windows as that mirrors device hotplug flows where the proper locks are held.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from a32320b71f085f8d82afedcf285f1682c8c00aed before 98c7e206af48b4433b2192cc1a538db2acc49876; from a32320b71f085f8d82afedcf285f1682c8c00aed before b0b6a9c65cb72c901fdcc6ae83d7afd70cdca1b8; from a32320b71f085f8d82afedcf285f1682c8c00aed before d91feb88692e81b00cd22f0125cfcd04970b4a0b | CNA record |
References
- https://git.kernel.org/stable/c/98c7e206af48b4433b2192cc1a538db2acc49876
- https://git.kernel.org/stable/c/b0b6a9c65cb72c901fdcc6ae83d7afd70cdca1b8
- https://git.kernel.org/stable/c/d91feb88692e81b00cd22f0125cfcd04970b4a0b
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.