Linux Kernel CXL Region Reference Leak Vulnerability

A vulnerability in the Linux kernel's CXL (Compute Express Link) region management has been addressed. When a CXL region is deleted, any targets previously assigned to that region retain references to it. The vulnerability arose because these references were not properly managed, leading to a memory leak. Once the region's sysfs interface was removed, userspace lost the ability to detach targets, causing the region object to leak. The issue has been resolved by ensuring that all targets are detached before the region is unregistered, allowing the region object to be properly cleaned up.

Impact

The vulnerability could lead to a memory leak, where deleted CXL regions are not properly cleaned up, potentially causing increased memory usage over time.