CVE-2024-50226

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-50226
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50226.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50226
Downstream
Related
Published
2024-11-09T10:14:37Z
Modified
2025-10-17T16:20:40.166205Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
Details

In the Linux kernel, the following vulnerability has been resolved:

cxl/port: Fix use-after-free, permit out-of-order decoder shutdown

In support of investigating an initialization failure report [1], cxltest was updated to register mock memory-devices after the mock root-port/bus device had been registered. That led to cxltest crashing with a use-after-free bug with the following signature:

cxl_port_attach_region: cxl region3: cxl_host_bridge.0:port3 decoder3.0 add: mem0:decoder7.0 @ 0 next: cxl_switch_uport.0 nr_eps: 1 nr_targets: 1
cxl_port_attach_region: cxl region3: cxl_host_bridge.0:port3 decoder3.0 add: mem4:decoder14.0 @ 1 next: cxl_switch_uport.0 nr_eps: 2 nr_targets: 1
cxl_port_setup_targets: cxl region3: cxl_switch_uport.0:port6 target[0] = cxl_switch_dport.0 for mem0:decoder7.0 @ 0

1) cxlportsetuptargets: cxl region3: cxlswitchuport.0:port6 target[1] = cxlswitchdport.4 for mem4:decoder14.0 @ 1 [..] cxldunregister: cxl decoder14.0: cxlregiondecodereset: cxlregion region3: mockdecoderreset: cxlport port3: decoder3.0 reset 2) mockdecoderreset: cxlport port3: decoder3.0: out of order reset, expected decoder3.1 cxlendpointdecoderrelease: cxl decoder14.0: [..] cxldunregister: cxl decoder7.0: 3) cxlregiondecodereset: cxlregion region3: Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6bc3: 0000 [#1] PREEMPT SMP PTI [..] RIP: 0010:tocxlport+0x8/0x60 [cxlcore] [..] Call Trace: <TASK> cxlregiondecodereset+0x69/0x190 [cxlcore] cxlregiondetach+0xe8/0x210 [cxlcore] cxldecoderkillregion+0x27/0x40 [cxlcore] cxldunregister+0x5d/0x60 [cxlcore]

At 1) a region has been established with 2 endpoint decoders (7.0 and 14.0). Those endpoints share a common switch-decoder in the topology (3.0). At teardown, 2), decoder14.0 is the first to be removed and hits the "out of order reset case" in the switch decoder. The effect though is that region3 cleanup is aborted leaving it in-tact and referencing decoder14.0. At 3) the second attempt to teardown region3 trips over the stale decoder14.0 object which has long since been deleted.

The fix here is to recognize that the CXL specification places no mandate on in-order shutdown of switch-decoders, the driver enforces in-order allocation, and hardware enforces in-order commit. So, rather than fail and leave objects dangling, always remove them.

In support of making cxlregiondecodereset() always succeed, cxlregioninvalidatememregion() failures are turned into warnings. Crashing the kernel is ok there since system integrity is at risk if caches cannot be managed around physical address mutation events like CXL region destruction.

A new deviceforeachchildreversefrom() is added to cleanup port->commitend after all dependent decoders have been disabled. In other words if decoders are allocated 0->1->2 and disabled 1->2->0 then port->commit_end only decrements from 2 after 2 has been disabled, and it decrements all the way to zero since 1 was disabled previously.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
176baefb2eb5d7a3ddebe3ff803db1fce44574b5
Fixed
8e1b52c15c81106456437f8e49575040e489e355
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
176baefb2eb5d7a3ddebe3ff803db1fce44574b5
Fixed
78c8454fdce0eeee962be004eb6d99860c80dad1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
176baefb2eb5d7a3ddebe3ff803db1fce44574b5
Fixed
101c268bd2f37e965a5468353e62d154db38838e

Affected versions

v5.*

v5.19
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.11.6
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.55
v6.6.56
v6.6.57
v6.6.58
v6.6.59
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "id": "CVE-2024-50226-09087f39",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "222806117679479067821682108737417406827",
            "length": 1233.0
        },
        "target": {
            "file": "drivers/cxl/core/region.c",
            "function": "cxl_region_detach"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-0ae5aa19",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "87280105264610195757991839829387851317",
                "117281448527516277582209768502767321197",
                "182120053813880207305693309373984096744",
                "185897577660059388292936988156493403669"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "include/linux/device.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-0c5cdd6c",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "215282311065913201300638068680196863697",
            "length": 1042.0
        },
        "target": {
            "file": "drivers/cxl/core/hdm.c",
            "function": "cxl_decoder_reset"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-0f332499",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "265504089280003683764620927319101708786",
                "209315261179781893250655189207215358191",
                "238339122975980565265816267691906766321",
                "161057318370717785578687868852448556692",
                "5205011567896087377956103178519381014",
                "332191254238920036279650905216119866500",
                "179282861971375697976743500929603488927",
                "198075835128256434141459919116749765510",
                "254827656112271206288547237307561506262",
                "256635907731464485098648152302059621745",
                "188985935802145881634580758537081402934",
                "45636742862953604767604657650849960717",
                "117173865102507347384286650389086229565",
                "276156434374325671345017139939617389520",
                "180388579231199889761249893076335012864",
                "260873568298579676828011450591578818501",
                "118545322248725807717333057372101752177",
                "237710697964658216246713866122975626742",
                "243909184111307197816199229668499122626"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "tools/testing/cxl/test/cxl.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-121b89b0",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "222806117679479067821682108737417406827",
            "length": 1233.0
        },
        "target": {
            "file": "drivers/cxl/core/region.c",
            "function": "cxl_region_detach"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-37ae32e4",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "87280105264610195757991839829387851317",
                "117281448527516277582209768502767321197",
                "182120053813880207305693309373984096744",
                "185897577660059388292936988156493403669"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "include/linux/device.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-3b323fd9",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "266971234403604560910413785672304535058",
                "338856473194780774704931833086162392634",
                "170318155125505571064295081582358754408"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/base/core.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-3c87d353",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "157702531801035888186663847572771254247",
                "232388790774059762416606143002841293561",
                "331078269805074428606011967023172565789",
                "105972632677295293292544261057023388012",
                "218558280463979907524374342210610989105",
                "133195140980306626964107884010783165501",
                "291705864729152834777082421755431317210",
                "142924248152329105827479083516945905780",
                "188985935802145881634580758537081402934",
                "45636742862953604767604657650849960717",
                "117173865102507347384286650389086229565",
                "334297838054927316815326222100404949312",
                "240557902224221360868839205909641944054",
                "117803534165946882712890553158886740107",
                "147290121060112421399995126096949266677",
                "290094215636457825274741127681956130569",
                "334988484160084646780658125772809096742",
                "271555850105401982118918600474835316197",
                "174186195320537960620665296537932627645",
                "106130818549386302260753279141940162547",
                "41015301403180408437770220337726292740",
                "312298536159845931028181751351954321167"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/cxl/core/hdm.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-3cb80dbe",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "157702531801035888186663847572771254247",
                "232388790774059762416606143002841293561",
                "331078269805074428606011967023172565789",
                "105972632677295293292544261057023388012",
                "218558280463979907524374342210610989105",
                "133195140980306626964107884010783165501",
                "291705864729152834777082421755431317210",
                "142924248152329105827479083516945905780",
                "188985935802145881634580758537081402934",
                "45636742862953604767604657650849960717",
                "117173865102507347384286650389086229565",
                "334297838054927316815326222100404949312",
                "240557902224221360868839205909641944054",
                "117803534165946882712890553158886740107",
                "147290121060112421399995126096949266677",
                "290094215636457825274741127681956130569",
                "334988484160084646780658125772809096742",
                "271555850105401982118918600474835316197",
                "174186195320537960620665296537932627645",
                "106130818549386302260753279141940162547",
                "41015301403180408437770220337726292740",
                "312298536159845931028181751351954321167"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/cxl/core/hdm.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-4cea6e38",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "161929542786992509560452631841214320512",
                "611176070380799293161771979381409358",
                "189437792155125664019757455152598207262",
                "159704227198475569209309923583949279802",
                "306588551315677478552400795265699138788",
                "111398174294407440799966800648696792757",
                "312514205348337471136675648975734755303",
                "189997612506989821540518579155009455464"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/cxl/cxl.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-4f709abf",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "215282311065913201300638068680196863697",
            "length": 1042.0
        },
        "target": {
            "file": "drivers/cxl/core/hdm.c",
            "function": "cxl_decoder_reset"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-522ca400",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "171993506652565568161874010111973180741",
                "155904407015657044085243505692351644770",
                "180598351906191536161611982554882704908",
                "157277852184247566365665675527742021131",
                "74477904727650726030871441288905185930",
                "23596245604133933283439155672453427816",
                "34876670718267330042099736134198072571",
                "139481026763896675046411852310373939706",
                "319071523216320121584665304936965930803",
                "177891481152749068221275750269241476558",
                "284934455896002106880544915433023112114",
                "292609855220236171676209573698879524495",
                "105876858606326135710945869117468805499",
                "9806503138749050678454933120497179518",
                "268068317006997569470084677889214620190",
                "51069033620503862097181458583796815554",
                "235838118254793510107171405905729725943",
                "206842012256307428274069842695087601148",
                "123876221159415885140676154009295031459",
                "197885235489365116982010355233397416034",
                "41776397635066545669645277433838273409",
                "18973034543387137061402880225971705805",
                "166854741222807693338354770994088405157",
                "141374801473920845075140301907621748542",
                "339747490446309957789676630584024450231",
                "197885235489365116982010355233397416034",
                "212882295954985363071256247380056638346",
                "115593567976987404962532055800204463236",
                "256954890535008699642412381810663190590",
                "213007083067439174817944285995023516070",
                "14118447869891931769892110935963135702",
                "28339081716333533033975544910307344061",
                "14087355386386142134499337516114905609",
                "220345486065353534567514824049977953997",
                "125292911385146960421128035444348857873",
                "102196952240326828797133432993049513240",
                "247308365315747120482507412469453648404",
                "20656423356877155944541175939907813736",
                "244406488048345687675100614048569751819",
                "330094410895244873792602435756019997653",
                "246988498836101836498830992196880025801",
                "245397077955234033678975153384631098975",
                "307275979394487300950327861626068121053",
                "193349640973856159043980938157329510912",
                "119029750880536068824275989519507014580"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/cxl/core/region.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-52b1fbf3",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "91011190342375115332467854527924841009",
            "length": 531.0
        },
        "target": {
            "file": "tools/testing/cxl/test/cxl.c",
            "function": "mock_decoder_reset"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-52eb66c3",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "79037667792055702758254448719778872251",
            "length": 1025.0
        },
        "target": {
            "file": "drivers/cxl/core/region.c",
            "function": "cxl_region_decode_reset"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-59af66a9",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "79037667792055702758254448719778872251",
            "length": 1025.0
        },
        "target": {
            "file": "drivers/cxl/core/region.c",
            "function": "cxl_region_decode_reset"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-5c2d6ddd",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "161929542786992509560452631841214320512",
                "611176070380799293161771979381409358",
                "189437792155125664019757455152598207262",
                "159704227198475569209309923583949279802",
                "306588551315677478552400795265699138788",
                "111398174294407440799966800648696792757",
                "312514205348337471136675648975734755303",
                "189997612506989821540518579155009455464"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/cxl/cxl.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-5de2fef7",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "323377892463325760239510078442930487712",
            "length": 1060.0
        },
        "target": {
            "file": "drivers/cxl/core/region.c",
            "function": "commit_store"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-5f37d87f",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "222806117679479067821682108737417406827",
            "length": 1233.0
        },
        "target": {
            "file": "drivers/cxl/core/region.c",
            "function": "cxl_region_detach"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-6a906628",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "265504089280003683764620927319101708786",
                "209315261179781893250655189207215358191",
                "238339122975980565265816267691906766321",
                "161057318370717785578687868852448556692",
                "5205011567896087377956103178519381014",
                "332191254238920036279650905216119866500",
                "179282861971375697976743500929603488927",
                "198075835128256434141459919116749765510",
                "254827656112271206288547237307561506262",
                "256635907731464485098648152302059621745",
                "188985935802145881634580758537081402934",
                "45636742862953604767604657650849960717",
                "117173865102507347384286650389086229565",
                "276156434374325671345017139939617389520",
                "180388579231199889761249893076335012864",
                "260873568298579676828011450591578818501",
                "118545322248725807717333057372101752177",
                "237710697964658216246713866122975626742",
                "243909184111307197816199229668499122626"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "tools/testing/cxl/test/cxl.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-72ec6971",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "171993506652565568161874010111973180741",
                "155904407015657044085243505692351644770",
                "180598351906191536161611982554882704908",
                "157277852184247566365665675527742021131",
                "74477904727650726030871441288905185930",
                "23596245604133933283439155672453427816",
                "34876670718267330042099736134198072571",
                "139481026763896675046411852310373939706",
                "319071523216320121584665304936965930803",
                "177891481152749068221275750269241476558",
                "284934455896002106880544915433023112114",
                "292609855220236171676209573698879524495",
                "105876858606326135710945869117468805499",
                "9806503138749050678454933120497179518",
                "268068317006997569470084677889214620190",
                "51069033620503862097181458583796815554",
                "235838118254793510107171405905729725943",
                "206842012256307428274069842695087601148",
                "123876221159415885140676154009295031459",
                "197885235489365116982010355233397416034",
                "41776397635066545669645277433838273409",
                "18973034543387137061402880225971705805",
                "166854741222807693338354770994088405157",
                "141374801473920845075140301907621748542",
                "339747490446309957789676630584024450231",
                "197885235489365116982010355233397416034",
                "212882295954985363071256247380056638346",
                "115593567976987404962532055800204463236",
                "256954890535008699642412381810663190590",
                "213007083067439174817944285995023516070",
                "14118447869891931769892110935963135702",
                "28339081716333533033975544910307344061",
                "14087355386386142134499337516114905609",
                "220345486065353534567514824049977953997",
                "125292911385146960421128035444348857873",
                "102196952240326828797133432993049513240",
                "247308365315747120482507412469453648404",
                "20656423356877155944541175939907813736",
                "244406488048345687675100614048569751819",
                "330094410895244873792602435756019997653",
                "246988498836101836498830992196880025801",
                "245397077955234033678975153384631098975",
                "307275979394487300950327861626068121053",
                "193349640973856159043980938157329510912",
                "119029750880536068824275989519507014580"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/cxl/core/region.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-740bf0c4",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "265504089280003683764620927319101708786",
                "209315261179781893250655189207215358191",
                "238339122975980565265816267691906766321",
                "161057318370717785578687868852448556692",
                "5205011567896087377956103178519381014",
                "332191254238920036279650905216119866500",
                "179282861971375697976743500929603488927",
                "198075835128256434141459919116749765510",
                "254827656112271206288547237307561506262",
                "256635907731464485098648152302059621745",
                "188985935802145881634580758537081402934",
                "45636742862953604767604657650849960717",
                "117173865102507347384286650389086229565",
                "276156434374325671345017139939617389520",
                "180388579231199889761249893076335012864",
                "260873568298579676828011450591578818501",
                "118545322248725807717333057372101752177",
                "237710697964658216246713866122975626742",
                "243909184111307197816199229668499122626"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "tools/testing/cxl/test/cxl.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-741a76be",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "157702531801035888186663847572771254247",
                "232388790774059762416606143002841293561",
                "331078269805074428606011967023172565789",
                "105972632677295293292544261057023388012",
                "218558280463979907524374342210610989105",
                "133195140980306626964107884010783165501",
                "291705864729152834777082421755431317210",
                "142924248152329105827479083516945905780",
                "188985935802145881634580758537081402934",
                "45636742862953604767604657650849960717",
                "117173865102507347384286650389086229565",
                "334297838054927316815326222100404949312",
                "240557902224221360868839205909641944054",
                "117803534165946882712890553158886740107",
                "147290121060112421399995126096949266677",
                "290094215636457825274741127681956130569",
                "334988484160084646780658125772809096742",
                "271555850105401982118918600474835316197",
                "174186195320537960620665296537932627645",
                "106130818549386302260753279141940162547",
                "41015301403180408437770220337726292740",
                "312298536159845931028181751351954321167"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/cxl/core/hdm.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-77b9e1d0",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "171993506652565568161874010111973180741",
                "155904407015657044085243505692351644770",
                "180598351906191536161611982554882704908",
                "157277852184247566365665675527742021131",
                "74477904727650726030871441288905185930",
                "23596245604133933283439155672453427816",
                "34876670718267330042099736134198072571",
                "139481026763896675046411852310373939706",
                "319071523216320121584665304936965930803",
                "177891481152749068221275750269241476558",
                "284934455896002106880544915433023112114",
                "292609855220236171676209573698879524495",
                "105876858606326135710945869117468805499",
                "9806503138749050678454933120497179518",
                "268068317006997569470084677889214620190",
                "51069033620503862097181458583796815554",
                "235838118254793510107171405905729725943",
                "206842012256307428274069842695087601148",
                "123876221159415885140676154009295031459",
                "197885235489365116982010355233397416034",
                "41776397635066545669645277433838273409",
                "18973034543387137061402880225971705805",
                "166854741222807693338354770994088405157",
                "141374801473920845075140301907621748542",
                "339747490446309957789676630584024450231",
                "197885235489365116982010355233397416034",
                "212882295954985363071256247380056638346",
                "115593567976987404962532055800204463236",
                "256954890535008699642412381810663190590",
                "213007083067439174817944285995023516070",
                "14118447869891931769892110935963135702",
                "28339081716333533033975544910307344061",
                "14087355386386142134499337516114905609",
                "220345486065353534567514824049977953997",
                "125292911385146960421128035444348857873",
                "102196952240326828797133432993049513240",
                "247308365315747120482507412469453648404",
                "20656423356877155944541175939907813736",
                "244406488048345687675100614048569751819",
                "330094410895244873792602435756019997653",
                "246988498836101836498830992196880025801",
                "245397077955234033678975153384631098975",
                "307275979394487300950327861626068121053",
                "193349640973856159043980938157329510912",
                "119029750880536068824275989519507014580"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/cxl/core/region.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-8835b107",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "87280105264610195757991839829387851317",
                "117281448527516277582209768502767321197",
                "182120053813880207305693309373984096744",
                "185897577660059388292936988156493403669"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "include/linux/device.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@101c268bd2f37e965a5468353e62d154db38838e"
    },
    {
        "id": "CVE-2024-50226-9153aa57",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "215282311065913201300638068680196863697",
            "length": 1042.0
        },
        "target": {
            "file": "drivers/cxl/core/hdm.c",
            "function": "cxl_decoder_reset"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-970fbc2a",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "266971234403604560910413785672304535058",
                "338856473194780774704931833086162392634",
                "170318155125505571064295081582358754408"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/base/core.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-a018dc2c",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "161929542786992509560452631841214320512",
                "611176070380799293161771979381409358",
                "189437792155125664019757455152598207262",
                "159704227198475569209309923583949279802",
                "306588551315677478552400795265699138788",
                "111398174294407440799966800648696792757",
                "312514205348337471136675648975734755303",
                "189997612506989821540518579155009455464"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/cxl/cxl.h"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-a2d68870",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "266971234403604560910413785672304535058",
                "338856473194780774704931833086162392634",
                "170318155125505571064295081582358754408"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/base/core.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-b72f8dbf",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "323377892463325760239510078442930487712",
            "length": 1060.0
        },
        "target": {
            "file": "drivers/cxl/core/region.c",
            "function": "commit_store"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-bcd6ae67",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "79037667792055702758254448719778872251",
            "length": 1025.0
        },
        "target": {
            "file": "drivers/cxl/core/region.c",
            "function": "cxl_region_decode_reset"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-c515e499",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "323377892463325760239510078442930487712",
            "length": 1060.0
        },
        "target": {
            "file": "drivers/cxl/core/region.c",
            "function": "commit_store"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    },
    {
        "id": "CVE-2024-50226-ce4848af",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "91011190342375115332467854527924841009",
            "length": 531.0
        },
        "target": {
            "file": "tools/testing/cxl/test/cxl.c",
            "function": "mock_decoder_reset"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78c8454fdce0eeee962be004eb6d99860c80dad1"
    },
    {
        "id": "CVE-2024-50226-d19c445b",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "91011190342375115332467854527924841009",
            "length": 531.0
        },
        "target": {
            "file": "tools/testing/cxl/test/cxl.c",
            "function": "mock_decoder_reset"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e1b52c15c81106456437f8e49575040e489e355"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.6.60
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.7