The Linux kernel had a vulnerability in the cxl/mce subsystem where the MCE notifier was registered per memory device and stored in 'struct cxl_memdev_state', despite only requiring per-region state. This caused lifetime issues reported by Flavien Solt, resulting in potential NULL dereferences and use-after-free bugs in the MCE handler. The fix involves moving the notifier into 'struct cxl_region' and registering it during cxl_region_probe(), limited to regions with extended linear cache. Additionally, obsolete code (cxl_port_get_spa_cache_alias) was removed. This change corrects the notifier's lifetime management and prevents the memory safety issues.

The vulnerability could lead to NULL pointer dereferences and use-after-free conditions within the MCE handler of the Linux kernel's cxl/mce subsystem. Such memory safety issues can cause kernel crashes or undefined behavior, potentially impacting system stability. No information indicates active exploitation in the wild.

A fix has been implemented in the Linux kernel to address this vulnerability by changing the notifier registration from per memory device to per region. Users should update to the Linux kernel version that includes this fix. Since this is a kernel-level issue, applying the official kernel update is the recommended remediation.