Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-92490

firmware: arm_scmi: Unrequest devices if driver registration fails

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unrequest devices if driver registration fails scmi_driver_register() requests protocol devices before registering the driver. If driver_register() fails, those requests remain in the global IDR and retain pointers to the module's ID table. Once the failed module load releases that storage, later request matching or SCMI device creation can dereference the stale pointers. Unrequest the complete protocol table before returning the registration failure. At this point table registration succeeded, so every entry is owned by the current registration attempt.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a6fe96b2e371d5fd300cca24459cdcf471c2c741 to < 35a36fbbc985135f0d35a89d7f9d035ffc499d6eaffected
  • d3cd7c525fd2ecce3a6c963f314969a54783d211 to < 524e57035af2d32498af9dd8fa6fdc92fcc8f80aaffected
  • d3cd7c525fd2ecce3a6c963f314969a54783d211 to < 06e65e07a1bcb39a1ebc8bb89a981f8e07900497affected
  • d3cd7c525fd2ecce3a6c963f314969a54783d211 to < a76b20b1f03099204db29b90e1024fe1c2b2cdd7affected
  • d3cd7c525fd2ecce3a6c963f314969a54783d211 to < 4520d4a1db37198756ad23568e36cdf091b6ffffaffected
  • d3cd7c525fd2ecce3a6c963f314969a54783d211 to < 9f7cd6a62aa754ed6b48cbd5d50de40add1bcc86affected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References