In the Linux kernel, the following vulnerability has been resolved:
cxl/region: Avoid null pointer dereference in region lookup
cxl_dpa_to_region() looks up a region based on a memdev and DPA. It wrongly assumes an endpoint found mapping the DPA is also of a fully assembled region. When not true it leads to a null pointer dereference looking up the region name.
This appears during testing of region lookup after a failure to assemble a BIOS defined region or if the lookup raced with the assembly of the BIOS defined region.
Failure to clean up BIOS defined regions that fail assembly is an issue in itself and a fix to that problem will alleviate some of the impact. It will not alleviate the race condition so let's harden this path.
The behavior change is that the kernel oops due to a null pointer dereference is replaced with a dev_dbg() message noting that an endpoint was mapped.
Additional comments are added so that future users of this function can more clearly understand what it provides.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-defaultUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade dtb-hisilicon | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-gkeop-6.8 | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub