CVE-2022-49893

In the Linux kernel, the following vulnerability has been resolved:

cxl/region: Fix cxl_region leak, cleanup targets at region delete

When a region is deleted any targets that have been previously assigned to that region hold references to it. Trigger those references to drop by detaching all targets at unregister_region() time.

Otherwise that region object will leak as userspace has lost the ability to detach targets once region sysfs is torn down.

A memory leak was fixed in the cxl_region subsystem where previously assigned endpoint decoders retained references to a deleted region object. Without explicit target detachment at the time of region removal, these references were never released, leading to a persistent leak. This issue can only be triggered by privileged users with access to region configuration via sysfs. Unprivileged users cannot create or delete CXL regions or assign decoders.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.