CVE-2026-89571

A flaw was found in the Linux kernel's CXL (Compute Express Link) features. A local attacker could exploit an out-of-bounds read vulnerability in the fwctl_cmd_rpc() and cxlctl_set_feature() functions. This occurs when the system attempts to copy data with a small input buffer length but processes a larger, user-controlled operation size without proper validation. This can lead to reading beyond the allocated memory, causing a kernel crash and resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.