PT-2026-121863

In the Linux kernel, the following vulnerability has been resolved: firmware: arm scmi: Validate SENSOR UPDATE payload size SENSOR UPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did...

PT-2026-121862

In the Linux kernel, the following vulnerability has been resolved: firmware: arm scmi: Validate BASE ERROR EVENT payload size BASE ERROR EVENT carries a variable number of message reports, with the count encoded in error status. The notification parser used that count without checking whether th...

CVE-2026-92490

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware driver. When a driver fails to register, the system may not properly unregister associated protocol devices, leaving behind invalid references. This can lead to the system attempting to access memory...

Astra Linux – Vulnerability in Linux 5.15, Linux

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Hardened access to reset domains. Accessing reset domain descriptors via indexes in SCMI driver requests, through the SCMI reset operation interface, may potentially lead to out-of-bound violations if the SCMI...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Fixed a double-free in the SMC transport cleanup process. When the generic SCMI code destroys a channel, it calls the chanfree callback function, which is defined by each transport. Since multiple protocols may...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Firmware: armscmi: Fixed a double-free operation in the OPTEE transport. Channels can be shared between protocols; avoiding the need to free the same descriptor twice when unloading the stack...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: scmi: Fixed the issue of a memory leak caused by the failure to remove generic power domains when the ofgenpdaddprovideronecell function fails during probing. If the ofgenpdaddprovideronecell function fails during...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Balances the device reference count when destroying devices. Using devicefindchild to find the appropriate SCMI device to destroy causes an imbalance in the device reference count. This occurs because...

CVE-2026-93090

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the setup of SCMI channels, a failure can occur where previously registered resources are not properly released. This oversight can lead to resource exhaustion, potentially causing system...

PT-2026-94889

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware where transport setup may enable callbacks before the setup routine returns. Specifically, mailbox chan setup registers the mailbox client via mb...

PT-2026-94798

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi driver register function requests protocol devices before registering the driver. If the driver register function fails,...

PT-2026-94881

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the mailbox chan setup function fails to properly release resources. When the function requests an additional unidirectional TX...

PT-2026-94879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi child dev find function drops the reference returned by device find child prematurely. This can lead to a race condition...

PT-2026-94880

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the mailbox chan setup function fails to properly release resources. When the function requests an additional P2A...

PT-2026-94882

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the SCMI bus notifier fails to release an SCMI handle during protocol bind failures. When the driver core emits BUS NOTIFY BIND...

PT-2026-94799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi protocol table register function fails to properly roll back registrations. When a later entry in an ID table fails,...

PT-2026-94814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The function scmi protocol device unrequest releases the scmi requested devices mtx mutex while notifying listeners but...

PT-2026-94883

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the system fails to properly reject out-of-range Device Tree DT protocol IDs. While the DT parsing paths identify protocol IDs th...

PT-2026-94888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The requested-devices notifier performs lookups of protocol fwnodes from the active protocols IDR Integer ID Management. If th...

PT-2026-94885

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where a failure during IDR insertion occurs after a successful transport channel setup. In this scenario, the error path destroys the...