Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-93092

firmware: arm_scmi: Unregister device notifier before IDR teardown

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unregister device notifier before IDR teardown The requested-devices notifier looks up protocol fwnodes from the active_protocols IDR. During remove, unregister the notifier before releasing and destroying active_protocols so no notifier callback can race with the IDR teardown. Keep the bus notifier registered until after the protocol state is torn down, matching the existing remove ordering for SCMI bus users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 53b8c25df7082edd78a3fc63e359abee0f28fa70 to < 70a26b37389846f1f29a09f7983aa3f45feff529affected
  • 53b8c25df7082edd78a3fc63e359abee0f28fa70 to < 492fb49eac24beecd6d3c5e4744a513e626f8dcfaffected
  • 53b8c25df7082edd78a3fc63e359abee0f28fa70 to < f5e528f631425416f9b39e9d8b385c9f1ceb40d6affected
  • 53b8c25df7082edd78a3fc63e359abee0f28fa70 to < 74fcaa0a3f7ad3edfde2e8c6cb8ae457a00e0b7aaffected
  • 53b8c25df7082edd78a3fc63e359abee0f28fa70 to < 66a0bbf30cc14140fe13f63cd594a7c1ee352b75affected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References