CVE-2024-26761

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the Linux CXL subsystem, which assumes that the host physical address (HPA) is equal to the system physical address (SPA). During HDM decoder setup, the DVSEC CXL range registers are checked to ensure the memory is enabled and the CXL range is within a HPA window described in a CFMWS structure of the CXL host bridge. If the HPA is not an SPA, the CXL range does not match a CFMWS window, causing the CXL memory range to be disabled, the HDM decoder to stop working, and resulting in system memory being disabled and a system hang during HDM decoder initialization. The change fixes a hardware hang but does not implement HPA/SPA translation.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.