CVE-2026-97423: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access construct_region() reads cxled->part and uses it to index cxlds->part[] without checking for a negative value. If the partition was never resolved, part remains at its initial value of -1, causing an out-of-bounds array access. Add a guard to return -EBUSY when part is negative. The check was dropped during a merge.

Засегнати продукти

• Linux Linux: b6faa9c613787b894913638a76030018f6d62d54 преди 06322da06116f1ee52271dd4d84dc69580087df7; b6faa9c613787b894913638a76030018f6d62d54 преди 16329b510f76e5b824e05bf8add8b29850f1f16f
• Linux Linux: 6.15; преди 6.15; 6.18.53 до 6.18.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-97423
• https://nvd.nist.gov/vuln/detail/CVE-2026-97423
• https://git.kernel.org/stable/c/06322da06116f1ee52271dd4d84dc69580087df7
• https://git.kernel.org/stable/c/16329b510f76e5b824e05bf8add8b29850f1f16f