{"id":"CVE-2026-92484","revision":"f371884e6e0141288a2355d95a230c0c","records":[{"revision":"f371884e6e0141288a2355d95a230c0c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-92484","aliases":[],"title":"cxl/region: Fix use-after-free in find_pos_and_ways() error path","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/region: Fix use-after-free in find_pos_and_ways() error path\n\nThe error path releases its reference to a switch decoder before\nlogging an error that includes the decoder name. If the released\nreference is the last one, the decoder can be freed before the error\nmessage accesses its name.\n\nDrop the reference after the error is reported.","state":0,"publishedAt":"2026-09-17T16:10:00.333+00:00","modifiedAt":"2026-10-19T09:03:50.812+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/cxl/core/region.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"9d90ab45d3d393532b7fa62d6a6b7ebbde9cf5fc\",\n                            \"lessThan\": \"68edf359b0b45cad2654510c1ca257079b241aa5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b3dc5c735a754142831f705068fcfa77551724ff\",\n                            \"lessThan\": \"b38ca9ce8c7d9b8151bb9e4770404c5e39600a48\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d90acdf49e18029cfe4194475c45ef143657737a\",\n                            \"lessThan\": \"f54b96e8aadbfc7f2a1b26df349ef9b062c47d2e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d90acdf49e18029cfe4194475c45ef143657737a\",\n                            \"lessThan\": \"8f7683ce37a53eeabd721941517341d2eef2cf3c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d90acdf49e18029cfe4194475c45ef143657737a\",\n                            \"lessThan\": \"15da704b732332cc1e8f121f624e5e6c05124c5d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8ad454d3050a40fd616d481e48d1aebb27d9951e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.6.96\",\n                            \"lessThan\": \"6.6.157\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.36\",\n                            \"lessThan\": \"6.12.110\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.15.5\",\n                            \"lessThan\": \"6.16\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/cxl/core/region.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.16\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.16\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/68edf359b0b45cad2654510c1ca257079b241aa5","https://git.kernel.org/stable/c/b38ca9ce8c7d9b8151bb9e4770404c5e39600a48","https://git.kernel.org/stable/c/f54b96e8aadbfc7f2a1b26df349ef9b062c47d2e","https://git.kernel.org/stable/c/8f7683ce37a53eeabd721941517341d2eef2cf3c","https://git.kernel.org/stable/c/15da704b732332cc1e8f121f624e5e6c05124c5d"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92484","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-92484","identifiers":["CVE-2026-92484"]},"retained":false,"historicalAffected":[]}],"coverage":[]}