CVE-2026-93821

PCI: altera: Protect root bus removal with rescan lock

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 18, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: altera: Protect root bus removal with rescan lock

Hold the pci_rescan_remove_lock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes.

[bhelgaas: commit log]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before cf9d84d1b6a7c3f3780c043df220a7e9e38137ebAffected ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before fc462f1bdeaea9789928cbfdf5e069ee559c7642Affected ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before 442b7f2a093b4a75f8963aaa7cbb2b8df35a6ac3Affected ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before 4b69c63cc247fc0f499fbd11076fee9c2a6e6fd7Affected ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before c0cd65906e5f7e293ef2568c9524cc0a918333c3Affected ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before 7cbb8f2750d91e64caff89e164ac8280bb80bedcAffected ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before a8759c8ac48c0419f5899e95a6ffc611b07c965bAffected
LinuxLinux	5.3Affected before 5.3Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before cf9d84d1b6a7c3f3780c043df220a7e9e38137ebAffected
ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before fc462f1bdeaea9789928cbfdf5e069ee559c7642Affected
ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before 442b7f2a093b4a75f8963aaa7cbb2b8df35a6ac3Affected
ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before 4b69c63cc247fc0f499fbd11076fee9c2a6e6fd7Affected
ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before c0cd65906e5f7e293ef2568c9524cc0a918333c3Affected
ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before 7cbb8f2750d91e64caff89e164ac8280bb80bedcAffected
ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22 to before a8759c8ac48c0419f5899e95a6ffc611b07c965bAffected

LinuxLinux

5.3Affected
before 5.3Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.