In the Linux kernel, the following vulnerability has been resolved:
cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
When CXL subsystem is auto-assembling a pmem region during cxl endpoint port probing, always hit below calltrace.
BUG: kernel NULL pointer dereference, address: 0000000000000078 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page RIP: 0010:cxl_pmem_region_probe+0x22e/0x360 [cxl_pmem] Call Trace: <TASK> ? __die+0x24/0x70 ? page_fault_oops+0x82/0x160 ? do_user_addr_fault+0x65/0x6b0 ? exc_page_fault+0x7d/0x170 ? asm_exc_page_fault+0x26/0x30 ? cxl_pmem_region_probe+0x22e/0x360 [cxl_pmem] ? cxl_pmem_region_probe+0x1ac/0x360 [cxl_pmem] cxl_bus_probe+0x1b/0x60 [cxl_core] really_probe+0x173/0x410 ? __pfx___device_attach_driver+0x10/0x10 __driver_probe_device+0x80/0x170 driver_probe_device+0x1e/0x90 __device_attach_driver+0x90/0x120 bus_for_each_drv+0x84/0xe0 __device_attach+0xbc/0x1f0 bus_probe_device+0x90/0xa0 device_add+0x51c/0x710 devm_cxl_add_pmem_region+0x1b5/0x380 [cxl_core] cxl_bus_probe+0x1b/0x60 [cxl_core]
The cxl_nvd of the memdev needs to be available during the pmem region probe. Currently the cxl_nvd is registered after the endpoint port probe. The endpoint probe, in the case of autoassembly of regions, can cause a pmem region probe requiring the not yet available cxl_nvd. Adjust the sequence so this dependency is met.
This requires adding a port parameter to cxl_find_nvdimm_bridge() that can be used to query the ancestor root port. The endpoint port is not yet available, but will share a common ancestor with its parent, so start the query from there instead.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-devel-azure | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04 | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub