418875 matches found
CVE-2026-93091
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Quiesce notifications before teardown scminotificationexit clears and releases the notification instance, but transport callbacks can still deliver incoming notifications until the TX/RX channels are freed...
CVE-2026-93092 firmware: arm_scmi: Unregister device notifier before IDR teardown
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unregister device notifier before IDR teardown The requested-devices notifier looks up protocol fwnodes from the activeprotocols IDR. During remove, unregister the notifier before releasing and destroying...
CVE-2026-93092
A race condition in the Linux kernel arm_scmi firmware driver could occur during device removal. The requested-devices notifier looks up protocol fwnodes from the active_protocols IDR , and if the notifier was not unregistered before the IDR was released and destroyed, a notifier callback could r...
CVE-2026-93091
CVE-2026-93091 affects the arm_scmi firmware driver in the Linux kernel. During device removal or probe error teardown, scmi_notification_exit() releases the notification instance before the TX/RX transport channels are freed, allowing an RX interrupt to call scmi_notify() and dereference freed m...
EUVD-2026-82200
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unregister device notifier before IDR teardown The requested-devices notifier looks up protocol fwnodes from the activeprotocols IDR. During remove, unregister the notifier before releasing and destroying...
CVE-2026-93091 firmware: arm_scmi: Quiesce notifications before teardown
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Quiesce notifications before teardown scminotificationexit clears and releases the notification instance, but transport callbacks can still deliver incoming notifications until the TX/RX channels are freed...
CVE-2026-93092
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unregister device notifier before IDR teardown The requested-devices notifier looks up protocol fwnodes from the activeprotocols IDR. During remove, unregister the notifier before releasing and destroying...
CVE-2026-93090
CVE-2026-93090 affects the ARM SCMI (System Control and Management Interface) firmware driver in the Linux kernel . The root cause is a failure-handling defect in scmi_channels_setup(): if this function fails after the common BASE channel or earlier protocol channels have already been registered ...
EUVD-2026-82198
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Clean up channels on setup failure scmichannelssetup can fail after the common BASE channel or earlier protocol channels have already been registered in the TX/RX IDRs. Route this failure through the existing...
CVE-2026-93090
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Clean up channels on setup failure scmichannelssetup can fail after the common BASE channel or earlier protocol channels have already been registered in the TX/RX IDRs. Route this failure through the existing...
CVE-2026-93090 firmware: arm_scmi: Clean up channels on setup failure
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Clean up channels on setup failure scmichannelssetup can fail after the common BASE channel or earlier protocol channels have already been registered in the TX/RX IDRs. Route this failure through the existing...
CVE-2026-93090 firmware: arm_scmi: Clean up channels on setup failure
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Clean up channels on setup failure scmichannelssetup can fail after the common BASE channel or earlier protocol channels have already been registered in the TX/RX IDRs. Route this failure through the existing...
CVE-2026-93086 firmware: arm_scmi: Avoid IDR updates while cleaning channels
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Avoid IDR updates while cleaning channels scmicleanupchannels walks the TX/RX channel IDRs with idrforeach to free transport resources and destroy the dedicated transport devices before calling idrdestroy. The...
CVE-2026-93089 firmware: arm_scmi: Free transport channel on IDR failure
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Free transport channel on IDR failure If transport channel setup succeeds but the following IDR insertion fails, the error path destroys the transport device and frees the channel info without invoking the...
EUVD-2026-82196
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Avoid IDR updates while cleaning channels scmicleanupchannels walks the TX/RX channel IDRs with idrforeach to free transport resources and destroy the dedicated transport devices before calling idrdestroy. The...
CVE-2026-93086
CVE-2026-93086 affects the Linux kernel's arm_scmi firmware driver. The vulnerability resides in scmi_cleanup_channels(), which iterates over TX/RX channel IDRs using idr_for_each() to free transport resources. The destroy callback incorrectly removed each entry from the IDR being walked, which c...
CVE-2026-93089
In the Linux kernel , the firmware: arm_scmi driver contains a resource-leak vulnerability in its error handling path. When the transport channel setup succeeds but the subsequent IDR insertion fails, the error path destroys the transport device and frees the channel info without invoking the tra...
CVE-2026-93086
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Avoid IDR updates while cleaning channels scmicleanupchannels walks the TX/RX channel IDRs with idrforeach to free transport resources and destroy the dedicated transport devices before calling idrdestroy. The...
CVE-2026-93089 firmware: arm_scmi: Free transport channel on IDR failure
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Free transport channel on IDR failure If transport channel setup succeeds but the following IDR insertion fails, the error path destroys the transport device and frees the channel info without invoking the...
CVE-2026-93089
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Free transport channel on IDR failure If transport channel setup succeeds but the following IDR insertion fails, the error path destroys the transport device and frees the channel info without invoking the...