What’s Vulnerable › Vulnerabilities

CVE-2026-92484: cxl/region: Fix use-after-free in find_pos_and_ways() error path

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix use-after-free in find_pos_and_ways() error path The error path releases its reference to a switch decoder before logging an error that includes the decoder name. If the released reference is the last one, the decoder can be freed before the error message accesses its name. Drop the reference after the error is reported.

Affected products

• Linux kernel: from 6.6.96 before 6.6.157; from 6.12.36 before 6.12.110; from 6.15.5 before 6.16; 6.16 — fixed in 6.12.110, 6.16, 6.6.157, 7.3

How to fix

Upgrade to a fixed version: Linux kernel 6.12.110, 6.16, 6.6.157, 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/15da704b732332cc1e8f121f624e5e6c05124c5d
• https://git.kernel.org/stable/c/68edf359b0b45cad2654510c1ca257079b241aa5
• https://git.kernel.org/stable/c/8f7683ce37a53eeabd721941517341d2eef2cf3c
• https://git.kernel.org/stable/c/b38ca9ce8c7d9b8151bb9e4770404c5e39600a48
• https://git.kernel.org/stable/c/f54b96e8aadbfc7f2a1b26df349ef9b062c47d2e

Get alerted when CVE-2026-92484 or the next vulnerability affects your stack