CVE-2026-93090

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the setup of SCMI channels, a failure can occur where previously registered resources are not properly released. This oversight can lead to resource exhaustion, potentially causing system...

AZL-101957 CVE-2026-93085 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Reject out of range DT protocol IDs SCMI protocol IDs carried in message headers are limited by MSGPROTOCOLIDMASK. The DT parsing paths noticed protocol IDs outside that range, but only logged an error and then...

EUVD-2026-82194

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Drop handle on protocol bind failures The SCMI bus notifier acquires an SCMI handle when the driver core emits BUSNOTIFYBINDDRIVER, before invoking the protocol driver probe callback. The protocol probe path on...

PT-2026-94884

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi cleanup channels function iterates through TX/RX channel IDRs using idr for each to free transport resources and destroy...

PT-2026-94886

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi channels setup function can fail after the common BASE channel or earlier protocol channels have been registered in the...

PT-2026-94887

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory management issue exists in the arm scmi firmware component. The scmi notification exit function releases the notification instance while transport callbacks may still deliver...

PT-2026-94885

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where a failure during IDR insertion occurs after a successful transport channel setup. In this scenario, the error path destroys the...

PT-2026-94889

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware where transport setup may enable callbacks before the setup routine returns. Specifically, mailbox chan setup registers the mailbox client via mb...

PT-2026-94799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi protocol table register function fails to properly roll back registrations. When a later entry in an ID table fails,...

PT-2026-94814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The function scmi protocol device unrequest releases the scmi requested devices mtx mutex while notifying listeners but...

PT-2026-94880

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the mailbox chan setup function fails to properly release resources. When the function requests an additional P2A...

PT-2026-94881

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the mailbox chan setup function fails to properly release resources. When the function requests an additional unidirectional TX...

PT-2026-94798

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi driver register function requests protocol devices before registering the driver. If the driver register function fails,...

PT-2026-94878

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where scmi device destroy uses a protocol and name lookup method that excludes transport devices, preventing them from being properly...

PT-2026-94879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi child dev find function drops the reference returned by device find child prematurely. This can lead to a race condition...

PT-2026-94882

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the SCMI bus notifier fails to release an SCMI handle during protocol bind failures. When the driver core emits BUS NOTIFY BIND...

PT-2026-94883

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the system fails to properly reject out-of-range Device Tree DT protocol IDs. While the DT parsing paths identify protocol IDs th...

PT-2026-94888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The requested-devices notifier performs lookups of protocol fwnodes from the active protocols IDR Integer ID Management. If th...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Fixed a slab-use-after-free in scmibusnotifier. The scmidev-name is released prematurely in scmidevicedestroy, which causes a slab-use-after-free when accessing scmidev-name in scmibusnotifier. Therefore, the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Balances the device reference count when destroying devices. Using devicefindchild to find the appropriate SCMI device to destroy causes an imbalance in the device reference count. This occurs because...