CVE-2026-93092

firmware: arm_scmi: Unregister device notifier before IDR teardown

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Unregister device notifier before IDR teardown

The requested-devices notifier looks up protocol fwnodes from the active_protocols IDR. During remove, unregister the notifier before releasing and destroying active_protocols so no notifier callback can race with the IDR teardown.

Keep the bus notifier registered until after the protocol state is torn down, matching the existing remove ordering for SCMI bus users.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0c0e28e587198b5b4fd742b761cbf7ef9a7fef1c to before 3ec1f79e912fa0e1c119753c819eb3c2591e71b7Affected 53b8c25df7082edd78a3fc63e359abee0f28fa70 to before 70a26b37389846f1f29a09f7983aa3f45feff529Affected 53b8c25df7082edd78a3fc63e359abee0f28fa70 to before 492fb49eac24beecd6d3c5e4744a513e626f8dcfAffected 53b8c25df7082edd78a3fc63e359abee0f28fa70 to before f5e528f631425416f9b39e9d8b385c9f1ceb40d6Affected 53b8c25df7082edd78a3fc63e359abee0f28fa70 to before 74fcaa0a3f7ad3edfde2e8c6cb8ae457a00e0b7aAffected 53b8c25df7082edd78a3fc63e359abee0f28fa70 to before 66a0bbf30cc14140fe13f63cd594a7c1ee352b75Affected
LinuxLinux	6.3Affected before 6.3Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

0c0e28e587198b5b4fd742b761cbf7ef9a7fef1c to before 3ec1f79e912fa0e1c119753c819eb3c2591e71b7Affected
53b8c25df7082edd78a3fc63e359abee0f28fa70 to before 70a26b37389846f1f29a09f7983aa3f45feff529Affected
53b8c25df7082edd78a3fc63e359abee0f28fa70 to before 492fb49eac24beecd6d3c5e4744a513e626f8dcfAffected
53b8c25df7082edd78a3fc63e359abee0f28fa70 to before f5e528f631425416f9b39e9d8b385c9f1ceb40d6Affected
53b8c25df7082edd78a3fc63e359abee0f28fa70 to before 74fcaa0a3f7ad3edfde2e8c6cb8ae457a00e0b7aAffected
53b8c25df7082edd78a3fc63e359abee0f28fa70 to before 66a0bbf30cc14140fe13f63cd594a7c1ee352b75Affected

LinuxLinux

6.3Affected
before 6.3Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.