Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access construct_region() reads cxled->part and uses it to index cxlds->part[] without checking for a negative value. If the partition was never resolved, part remains at its initial value of -1, causing an out-of-bounds array access. Add a guard to return -EBUSY when part is negative. The check was dropped during a merge.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected b6faa9c613787b894913638a76030018f6d62d54 before 06322da06116f1ee52271dd4d84dc69580087df7; affected b6faa9c613787b894913638a76030018f6d62d54 before 16329b510f76e5b824e05bf8add8b29850f1f16f |
| Linux / Linux | affected 6.15; unaffected 0 before 6.15; unaffected 6.18.53 through 6.18.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.