---
id: CVE-2026-92484
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cxl/region: Fix use-after-free in find_pos_and_ways() error path

  The error path releases its reference to a switch decoder before
  logging an error that includes the de…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  cxl/region: Fix use-after-free in find_pos_and_ways() error path

  The error path releases its reference to a switch decoder before
  logging an error that includes the de…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9d90ab45d3d393532b7fa62d6a6b7ebbde9cf5fc <
    68edf359b0b45cad2654510c1ca257079b241aa5
  - >-
    Linux >= b3dc5c735a754142831f705068fcfa77551724ff <
    b38ca9ce8c7d9b8151bb9e4770404c5e39600a48
  - >-
    Linux >= d90acdf49e18029cfe4194475c45ef143657737a <
    f54b96e8aadbfc7f2a1b26df349ef9b062c47d2e
  - >-
    Linux >= d90acdf49e18029cfe4194475c45ef143657737a <
    8f7683ce37a53eeabd721941517341d2eef2cf3c
  - >-
    Linux >= d90acdf49e18029cfe4194475c45ef143657737a <
    15da704b732332cc1e8f121f624e5e6c05124c5d
  - Linux 8ad454d3050a40fd616d481e48d1aebb27d9951e
  - Linux >= 6.6.96 < 6.6.157
  - Linux >= 6.12.36 < 6.12.110
  - Linux >= 6.15.5 < 6.16
  - Linux 6.16
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:50.473'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92484'
references:
  - url: 'https://git.kernel.org/stable/c/15da704b732332cc1e8f121f624e5e6c05124c5d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/68edf359b0b45cad2654510c1ca257079b241aa5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8f7683ce37a53eeabd721941517341d2eef2cf3c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b38ca9ce8c7d9b8151bb9e4770404c5e39600a48'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f54b96e8aadbfc7f2a1b26df349ef9b062c47d2e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.787Z'
epss: 0.002
epssPercentile: 0.0876
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

cxl/region: Fix use-after-free in find_pos_and_ways() error path

The error path releases its reference to a switch decoder before
logging an error that includes the decoder name. If the released
reference is the last one, the decoder can be freed before the error
message accesses its name.

Drop the reference after the error is reported.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.