{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"45d9fb4b758b9d602ee7776eb6754b0349946aad","status":"affected","version":"b9686e8c8e39d4072081ef078c04915ee51c8af4","versionType":"git"},{"lessThan":"0d9e734018d70cecf79e2e4c6082167160a0f13f","status":"affected","version":"b9686e8c8e39d4072081ef078c04915ee51c8af4","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.0"},{"lessThan":"6.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.8","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49893","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/region: Fix cxl_region leak, cleanup targets at region delete\n\nWhen a region is deleted any targets that have been previously assigned\nto that region hold references to it. Trigger those references to\ndrop by detaching all targets at unregister_region() time.\n\nOtherwise that region object will leak as userspace has lost the ability\nto detach targets once region sysfs is torn down.","epss":{"date":"2026-11-05","percentile":0.06443,"score":0.0017},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908810934,"publishedAt":1746108636503,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/45d9fb4b758b9d602ee7776eb6754b0349946aad"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0d9e734018d70cecf79e2e4c6082167160a0f13f"}],"remediation":[],"revision":"ce8977e260045f68d52cbcfe1f4857f1ef169c59740dcd5b2fdb2d97d0cb8bad","sources":[{"modifiedAt":1793908810934,"name":"CNA: Linux","retrievedAt":1793909475774,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49893"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909484025,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49893"}],"ssvc":{"assessedAt":1793908274364,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"cxl/region: Fix cxl_region leak, cleanup targets at region delete","updatedAt":1793909484025}