CVE-2026-74273

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the CXL region management where region deletion is not blocked during region creation. This allows userspace to confuse the kernel by violating assumptions that a region remains registered during the execution of cxl add to region() and that devm add action or reset() operates on a live struct cxl region. The flaw occurs specifically during the critical periods between construct region() and attach target(), and between device add() and the registration of remove actions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.