CVE-2026-89731

A flaw was found in the Linux kernel. A vulnerability exists in the cxl_rch_get_aer_info() function, which is responsible for handling CXL/RAS (Compute Express Link/Reliability, Availability, and Serviceability) AER (Advanced Error Reporting) capabilities. Due to a mismatch between a software structure and the physical hardware register size, the function reads beyond its intended memory boundary. This out-of-bounds read could potentially lead to system instability or unintended information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.