CVE-2026-31529

medium Red Hat
Published: April 22, 2026 (22 days ago)
Last Modified: April 22, 2026
Vendor: Red Hat
Source: REDHAT

Description

A flaw was found in the Linux kernel's `cxl/region` component. This vulnerability involves a resource leakage within the `__construct_region()` function. When `sysfs_update_group()` fails, the resource is not explicitly freed, leading to a memory leak. This could potentially allow a local attacker to cause a Denial of Service (DoS) by exhausting system resources.

CWE

CWE-772

Affected Products

Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9

References