In the Linux kernel, the following vulnerability has been resolved:
cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails
Commit 5e42bcbc3fef ("cxl/region: decrement ->nr_targets on error in cxl_region_attach()") tried to avoid 'eiw' initialization errors when ->nr_targets exceeded 16, by just decrementing ->nr_targets when cxl_region_setup_targets() failed.
Commit 86987c766276 ("cxl/region: Cleanup target list on attach error") extended that cleanup to also clear cxled->pos and p->targets[pos]. The initialization error was incidentally fixed separately by: Commit 8d4285425714 ("cxl/region: Fix port setup uninitialized variable warnings") which was merged a few days after 5e42bcbc3fef.
But now the original cleanup when cxl_region_setup_targets() fails prevents endpoint and switch decoder resources from being reused:
1) the cleanup does not set the decoder's region to NULL, which results in future dpa_size_store() calls returning -EBUSY 2) the decoder is not properly freed, which results in future commit errors associated with the upstream switch
Now that the initialization errors were fixed separately, the proper cleanup for this case is to just return immediately. Then the resources associated with this target get cleanup up as normal when the failed region is deleted.
The ->nr_targets decrement in the error case also helped prevent a p->targets[] array overflow, so add a new check to prevent against that overflow.
Tested by trying to create an invalid region for a 2 switch * 2 endpoint topology, and then following up with creating a valid region.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade dtb-amdUpgrade gfs2-kmp-64kb | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub