CVE-2026-93079

A flaw was found in the Linux kernel's CXL (Compute Express Link) feature handling. The cxlctl_get_feature() function does not properly validate the size of the output buffer against a user-controlled count value. This oversight allows a local attacker to provide a count larger than the allocated buffer, leading to a heap out-of-bounds write. Successful exploitation of this vulnerability could result in a denial of service, information disclosure, or potentially arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.