CVE-2026-92484
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-92484, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-17
Last updated on: 2026-09-17
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
cxl/region: Fix use-after-free in find_pos_and_ways() error path
The error path releases its reference to a switch decoder before
logging an error that includes the decoder name. If the released
reference is the last one, the decoder can be freed before the error
message accesses its name.
Drop the reference after the error is reported.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 9d90ab45d3d393532b7fa62d6a6b7ebbde9cf5fc |
| Linux | Linux | b3dc5c735a754142831f705068fcfa77551724ff |
| Linux | Linux | d90acdf49e18029cfe4194475c45ef143657737a |
| Linux | Linux | d90acdf49e18029cfe4194475c45ef143657737a |
| Linux | Linux | d90acdf49e18029cfe4194475c45ef143657737a |
| Linux | Linux | 8ad454d3050a40fd616d481e48d1aebb27d9951e |
| Linux | Linux | 6.6.96 |
| Linux | Linux | 6.12.36 |
| Linux | Linux | 6.15.5 |
| Linux | Linux | 6.16 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
