CVE-2022-49893
MEDIUMLinux Kernel 6.0-6.0.7 - Use-After-Free in CXL Region Target Detachment
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix cxl_region leak, cleanup targets at region delete When a region is deleted any targets that have been previously assigned to that region hold references to it. Trigger those references to drop by detaching all targets at unregister_region() time. Otherwise that region object will leak as userspace has lost the ability to detach targets once region sysfs is torn down.
References (2)
Core 2
Scores
CVSS v3
5.5
EPSS
0.0014
EPSS Percentile
3.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-401
Status
published
Products (9)
linux/Kernel
6.0.0 - 6.0.8linux
Linux/Linux
< 6.0
Linux/Linux
6.0
Linux/Linux
6.0.8 - 6.0.*
Linux/Linux
6.1
Linux/Linux
b9686e8c8e39d4072081ef078c04915ee51c8af4 - 0d9e734018d70cecf79e2e4c6082167160a0f13f
Linux/Linux
b9686e8c8e39d4072081ef078c04915ee51c8af4 - 45d9fb4b758b9d602ee7776eb6754b0349946aad
linux/linux_kernel
6.1 rc1 (3 CPE variants)
linux/linux_kernel
6.0 - 6.0.8
Published
May 01, 2025
Tracked Since
Feb 18, 2026