CVE-2022-49893

MEDIUM

Linux Kernel 6.0-6.0.7 - Use-After-Free in CXL Region Target Detachment

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix cxl_region leak, cleanup targets at region delete When a region is deleted any targets that have been previously assigned to that region hold references to it. Trigger those references to drop by detaching all targets at unregister_region() time. Otherwise that region object will leak as userspace has lost the ability to detach targets once region sysfs is torn down.

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 3.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-401
Status published
Products (9)
linux/Kernel 6.0.0 - 6.0.8linux
Linux/Linux < 6.0
Linux/Linux 6.0
Linux/Linux 6.0.8 - 6.0.*
Linux/Linux 6.1
Linux/Linux b9686e8c8e39d4072081ef078c04915ee51c8af4 - 0d9e734018d70cecf79e2e4c6082167160a0f13f
Linux/Linux b9686e8c8e39d4072081ef078c04915ee51c8af4 - 45d9fb4b758b9d602ee7776eb6754b0349946aad
linux/linux_kernel 6.1 rc1 (3 CPE variants)
linux/linux_kernel 6.0 - 6.0.8
Published May 01, 2025
Tracked Since Feb 18, 2026