---
id: CVE-2026-74273
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cxl/region: Block region delete during region creation

  Expand the range lock, rename it "regions_lock", to disable region deletion
  in the critical period between const…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cxl/region: Block region delete during region creation

  Expand the range lock, rename it "regions_lock", to disable region deletion
  in the critical period between const…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a32320b71f085f8d82afedcf285f1682c8c00aed <
    98c7e206af48b4433b2192cc1a538db2acc49876
  - >-
    Linux >= a32320b71f085f8d82afedcf285f1682c8c00aed <
    b0b6a9c65cb72c901fdcc6ae83d7afd70cdca1b8
  - >-
    Linux >= a32320b71f085f8d82afedcf285f1682c8c00aed <
    d91feb88692e81b00cd22f0125cfcd04970b4a0b
  - Linux 6.3
published: '2026-08-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:44.707'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-74273'
references:
  - url: 'https://git.kernel.org/stable/c/98c7e206af48b4433b2192cc1a538db2acc49876'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b0b6a9c65cb72c901fdcc6ae83d7afd70cdca1b8'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d91feb88692e81b00cd22f0125cfcd04970b4a0b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00198
epssPercentile: 0.08887
ingestedAt: '2026-10-15T11:00:41.678Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

cxl/region: Block region delete during region creation

Expand the range lock, rename it "regions_lock", to disable region deletion
in the critical period between construct_region() and attach_target(), as
well as the period between device_add() and registering the remove actions.

Otherwise, userspace can confuse the kernel. It can violate the assumption
the region stays registered through the completion of cxl_add_to_region().
It can violate the assumption that devm_add_action_or_reset() is working
with a live 'struct cxl_region'.

It is ok for the region to disappear outside of those windows as that
mirrors device hotplug flows where the proper locks are held.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.