CVE-2026-89570

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-89570

Key Details

CVE	CVE-2026-89570
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

cxl/mce: Make the MCE notifier per-region

Flavien Solt reported lifetime issues with the CXL MCE notifier, which

can lead to NULL dereferences and use-after-free in the MCE handler.

The notifier was registered per memory device and stored in 'struct

cxl_memdev_state', even though it only needs the region state (the

region's SPA range and its extended linear cache size).

Instead of keeping the memory device and endpoint alive, the correct fix

is to move the notifier into 'struct cxl_region' and register it from

cxl_region_probe() as it should be a per-region notifier. Setup the

registration to only happen for regions that have an extended linear

cache as that is the only current usage.

Remove cxl_port_get_spa_cache_alias() as it is now dead code.

[ dj: Update dev_warn() when notifier fails due to kconfig. (Ben) ] (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-89570
CVE	https://www.cve.org/CVERecord?id=CVE-2026-89570

Source

Reference

NVD

CVE