CVE-2026-93097

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the CXL mailbox implementation where a device returning a count of 0 while the CXL POISON FLAG MORE flag remains set causes an infinite do/while loop. Because the nr records variable does not advance, the max errors guard is never triggered. This condition occurs while holding the poison.mutex, which hangs the sysfs-triggered scan thread and blocks all subsequent poison operations on the device, allowing a malfunctioning or malicious device to wedge the poison scan.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.