CVE-2026-74272

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Race conditions exist during the deletion of CXL regions. The sysfs trigger may attempt to delete a region multiple times, and there is a lack of exclusion when the kernel releases a region during CXL root device teardown. These issues occur because the previous approach lacked proper locking and synchronization during lookup and deletion. The fix involves using the root decoder unregistration event to remove remaining regions and replacing the devres list of regions with an xarray, ensuring the regions lock is held during the process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.