CVE-2026-74275
Received Received - Intake

Out-of-Bounds Access in Linux Kernel CXL Region Driver

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() In cxl_cancel_auto_attach(), it assumes cxled->pos is a valid index for accessing p->targets[]. However, cxled->pos can be set to negative errno in cxl_region_sort_targets() if cxl_calc_interleave_pos() fails. This causes the driver to use a negative index to access p->targets[], resulting in out-of-bounds access. Fix it by walking p->targets[] instead of using cxled->pos directly.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74275
EUVD
EUVD-2026-59422

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds access issue in the Linux kernel's CXL (Compute Express Link) driver. It occurs in the cxl_cancel_auto_attach() function where a negative index can be used to access an array, causing memory corruption or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's CXL (Compute Express Link) subsystem. Detection requires checking kernel logs for out-of-bounds access errors related to cxl_cancel_auto_attach() or examining kernel source code for the affected function. No standard network commands detect this issue directly.

Impact Analysis

This vulnerability could lead to system instability, crashes, or potential privilege escalation if exploited. It may cause data corruption or denial-of-service conditions on affected systems running the vulnerable Linux kernel.

Mitigation Strategies

Apply the kernel patch that fixes the out-of-bounds access in cxl_cancel_auto_attach(). Update to a patched kernel version where this issue is resolved. If patching is not immediately possible, consider disabling the affected CXL functionality if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74275. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart