CVE-2026-93052
Last modified
CVE-2026-93052 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgq_inited bcm_vk_sync_msgq() fills the message queue information and then sets msgq_inited. Readers call bcm_vk_drv_access_ok() before accessing the message queues and their cached queue information. atomic_set()/atomic_read() do not order those accesses.
Description
In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgq_inited bcm_vk_sync_msgq() fills the message queue information and then sets msgq_inited. Readers call bcm_vk_drv_access_ok() before accessing the message queues and their cached queue information. atomic_set()/atomic_read() do not order those accesses. A reader can see msgq_inited set while still seeing stale queue information. Use release when publishing the initialized queues and acquire when checking the gate. Keep the clear in bcm_vk_blk_drv_access() as atomic_set(). It closes the gate and does not publish queue state to readers.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 111d746bb4767ad476f80fe49067e3df3d9a9375, < bab66a9e30e39a06f3463b19f8c704386dfd5268; >= 111d746bb4767ad476f80fe49067e3df3d9a9375, < 679cfada6868723ccf162ec3b78c7402ff2405bf; >= 111d746bb4767ad476f80fe49067e3df3d9a9375, < f7a8f4cbc8cede0be55220367dc52b126e2d39e5; >= 111d746bb4767ad476f80fe49067e3df3d9a9375, < 1df3926ed8771edf286ff753428b243f334e6041; >= 111d746bb4767ad476f80fe49067e3df3d9a9375, < a45d6dd3c11e921882a2e74c7c8710b975f2eaa7; >= 111d746bb4767ad476f80fe49067e3df3d9a9375, < 4984277bc43f84d7506346a09b29af138246d54a; >= 111d746bb4767ad476f80fe49067e3df3d9a9375, < 61b101c6a150057b6d512421ed108aed16e822ea |
| Linux | Linux | 5.12 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-93052?
How severe is CVE-2026-93052?
How do I fix CVE-2026-93052?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-93047In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93048In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93049In the Linux kernel, the following vulnerability has been re…
- CVE-2026-9305A weakness has been identified in QuantumNous new-api up to …6.3
- CVE-2026-93050In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93051In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93053In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93054In the Linux kernel, the following vulnerability has been re…7
- CVE-2026-93055In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93056In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93057In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93058In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-93052?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST