CVE-2026-93080
Last modified
CVE-2026-93080 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix transport device teardown lookup SCMI transport devices are deliberately excluded from normal SCMI bus matching so protocol drivers cannot bind to the internal transport children. However, scmi_device_destroy() uses the same protocol/name lookup to find devices that must be unregistered during channel teardown. Split the match helper so driver matching still skips transport devices, while explicit child lookup can find them for teardown.
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix transport device teardown lookup SCMI transport devices are deliberately excluded from normal SCMI bus matching so protocol drivers cannot bind to the internal transport children. However, scmi_device_destroy() uses the same protocol/name lookup to find devices that must be unregistered during channel teardown. Split the match helper so driver matching still skips transport devices, while explicit child lookup can find them for teardown. Use a shared transport-device name prefix macro for both matching and name generation. Since transport-device names are derived from direction and protocol ID, reject duplicate protocol channel setup before creating or finding a transport device. This prevents malformed firmware with duplicate protocol child nodes from reusing an existing transport device and then destroying it when the duplicate IDR insertion fails.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 9593804c44c24545e1b0496786dcb765d7b0e193, < c656427440ea627166394d00c4b72147d5d79c60; >= 9593804c44c24545e1b0496786dcb765d7b0e193, < 4635953b4c1af477e166073521a77de6279f6929; >= 9593804c44c24545e1b0496786dcb765d7b0e193, < a14dd8fe0a95db638c550ed984cfe2a7428c783d |
| Linux | Linux | 6.16 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-93080?
How severe is CVE-2026-93080?
How do I fix CVE-2026-93080?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-93075In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93076In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93077In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93078In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93079In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-9308Firefox for iOS Reader View replaced page content in its HTM…5.4
- CVE-2026-93081In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93082In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93083In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93084In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93085In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93086In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-93080?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
