CVE-2026-74275
High
Description
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() In cxl_cancel_auto_attach(), it assumes cxled->pos is a valid index for accessing p->targets[]. However, cxled->pos can be set to negative errno in cxl_region_sort_targets() if cxl_calc_interleave_pos() fails. This causes the driver to use a negative index to access p->targets[], resulting in out-of-bounds access. Fix it by walking p->targets[] instead of using cxled->pos directly.
SeverityHigh
CVSS8.4
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux44b2397eb67b7f728640989a22d062e41f94ab64, cbda6a2c2bec2a5fb30a2ce85baeab15b5fc7db3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 87805c32e6ad7b5ce2d9f7f47e76081857a4a335 ≤ v < 44b2397eb67b7f728640989a22d062e41f94ab64, 87805c32e6ad7b5ce2d9f7f47e76081857a4a335 ≤ v < cbda6a2c2bec2a5fb30a2ce85baeab15b5fc7db3, 7.1 | 44b2397eb67b7f728640989a22d062e41f94ab64, cbda6a2c2bec2a5fb30a2ce85baeab15b5fc7db3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.