---
id: CVE-2026-92484
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cxl/region: Fix use-after-free in find_pos_and_ways() error path

  The error path releases its reference to a switch decoder before
  logging an error that includes the de…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cxl/region: Fix use-after-free in find_pos_and_ways() error path

  The error path releases its reference to a switch decoder before
  logging an error that includes the de…
severity: medium
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9d90ab45d3d393532b7fa62d6a6b7ebbde9cf5fc <
    68edf359b0b45cad2654510c1ca257079b241aa5
  - >-
    Linux >= b3dc5c735a754142831f705068fcfa77551724ff <
    b38ca9ce8c7d9b8151bb9e4770404c5e39600a48
  - >-
    Linux >= d90acdf49e18029cfe4194475c45ef143657737a <
    f54b96e8aadbfc7f2a1b26df349ef9b062c47d2e
  - >-
    Linux >= d90acdf49e18029cfe4194475c45ef143657737a <
    8f7683ce37a53eeabd721941517341d2eef2cf3c
  - >-
    Linux >= d90acdf49e18029cfe4194475c45ef143657737a <
    15da704b732332cc1e8f121f624e5e6c05124c5d
  - Linux 8ad454d3050a40fd616d481e48d1aebb27d9951e
  - Linux >= 6.6.96 < 6.6.157
  - Linux >= 6.12.36 < 6.12.110
  - Linux >= 6.15.5 < 6.16
  - Linux 6.16
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:50.473'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92484'
references:
  - url: 'https://git.kernel.org/stable/c/15da704b732332cc1e8f121f624e5e6c05124c5d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/68edf359b0b45cad2654510c1ca257079b241aa5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8f7683ce37a53eeabd721941517341d2eef2cf3c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b38ca9ce8c7d9b8151bb9e4770404c5e39600a48'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f54b96e8aadbfc7f2a1b26df349ef9b062c47d2e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92484.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-92484'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2536310'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-92484'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92484'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-92484.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
ingestedAt: '2026-09-17T16:21:47.787Z'
epss: 0.002
epssPercentile: 0.09729
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe:
  - CWE-825
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

cxl/region: Fix use-after-free in find_pos_and_ways() error path

The error path releases its reference to a switch decoder before
logging an error that includes the decoder name. If the released
reference is the last one, the decoder can be freed before the error
message accesses its name.

Drop the reference after the error is reported.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10 · no fix planned: Red Hat Enterprise Linux 10 · updated 2026-10-20 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92484.json)