Answer in brief
CVE-2026-93086 records a Unknown severity vulnerability in firmware: arm_scmi: Avoid IDR updates while cleaning channels. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <aed24a3c63920539e9de7fbfe7929a2e7c888cd2 || >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <431c6b872ba7fedcc5a3afb0ec3517db4d95d088 || >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <54e5a4f7d83db4552d963d0785be32d9df680dcd || >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <bab26acebe55e8ad3ab545abda72faa7ca28c477 || >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <c38b1e19485aaa820e52cfe162525a8af67563da | aed24a3c63920539e9de7fbfe7929a2e7c888cd2, 431c6b872ba7fedcc5a3afb0ec3517db4d95d088, 54e5a4f7d83db4552d963d0785be32d9df680dcd, bab26acebe55e8ad3ab545abda72faa7ca28c477, c38b1e19485aaa820e52cfe162525a8af67563da |
| Linux/Linuxgeneric | 6.3 | Not reported |
| Linux/Linuxgeneric | >=22f7f35fd71b597a5d916e41d7646be6ee530c86 <f50698c617350a6e2064dffd6cff3f391e142f55 || >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <aed24a3c63920539e9de7fbfe7929a2e7c888cd2 || >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <431c6b872ba7fedcc5a3afb0ec3517db4d95d088 || >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <54e5a4f7d83db4552d963d0785be32d9df680dcd || >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <bab26acebe55e8ad3ab545abda72faa7ca28c477 || >=05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 <c38b1e19485aaa820e52cfe162525a8af67563da | f50698c617350a6e2064dffd6cff3f391e142f55, aed24a3c63920539e9de7fbfe7929a2e7c888cd2, 431c6b872ba7fedcc5a3afb0ec3517db4d95d088, 54e5a4f7d83db4552d963d0785be32d9df680dcd, bab26acebe55e8ad3ab545abda72faa7ca28c477, c38b1e19485aaa820e52cfe162525a8af67563da |
Published upstream
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 30, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 17, 2026
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Avoid IDR updates while cleaning channels scmi_cleanup_channels() walks the TX/RX channel IDRs with idr_for_each() to free transport resources and destroy the dedicated transport devices before calling idr_destroy(). The destroy callback removed each entry from the same IDR being walked. That is not needed for this cleanup path, and it is unsafe because idr_for_each() has not advanced its radix-tree iterator while the callback is running. Removing the current entry from the callback can invalidate the iterator state. The callback also cannot be protected by rcu_read_lock(), because scmi_device_destroy() may sleep. Leave IDR teardown to the following idr_destroy() call and keep the callback limited to device destruction.
Quoted source text, attributed separately from HOL analysis.