Linux Kernel EUVD-2026-24923

Vendors should apply the upstream patch available at commit f1b4741adf08b0063291ec1b0dfa9c3d55644933 or 77b310bb7b5ff8c017524df83292e0242ba89791 to resolve the memory leak. Users running Linux 6.19 should upgrade to version 6.19.11 or later; users on Linux 7.0 releases should upgrade once the final stable release incorporating the fix is available. The patch explicitly adds kfree() calls in error paths of __construct_region() that previously omitted resource cleanup when sysfs_update_group() fails early. Systems that cannot immediately patch should reduce exposure by restricting local access to privileged accounts and disabling CXL region initialization if not actively required for workloads. No workarounds exist for the underlying leak itself; mitigation relies on either patching or reducing the frequency of failed region construction attempts through careful configuration management.