In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Free transport channel on IDR failure

If transport channel setup succeeds but the following IDR insertion fails,
the error path destroys the transport device and frees the channel info
without invoking the transport cleanup callback.

Call chan_free() before destroying the device so transport specific
resources such as IRQs, mailbox channels and mapped shared memory are
released consistently with the normal teardown path.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 affected < ae7980c9af698d0a7e6790d49249abc71f0fc304
05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 affected < de0a4c103740cf54cf77370d47e03c9aa51aa5ee
05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 affected < d7c60c0fe2bd452b56fe07947842d64da61b7290
05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 affected < fbaebd380caa4e1cec9306ca00231da6518a123f
05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 affected < d72e7e5f24687c0490aabf317653caffe0447aeb
Linux Linux affected
Version Status Constraints
6.3 affected —
0 unaffected < 6.3
6.6.157 unaffected ≤ 6.6.*
6.12.110 unaffected ≤ 6.12.*
6.18.52 unaffected ≤ 6.18.*
7.2.6 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/ae7980c9af698d0a7e6790d49249abc71f0fc304 cve-icon cve-icon
https://git.kernel.org/stable/c/d72e7e5f24687c0490aabf317653caffe0447aeb cve-icon cve-icon
https://git.kernel.org/stable/c/d7c60c0fe2bd452b56fe07947842d64da61b7290 cve-icon cve-icon
https://git.kernel.org/stable/c/de0a4c103740cf54cf77370d47e03c9aa51aa5ee cve-icon cve-icon
https://git.kernel.org/stable/c/fbaebd380caa4e1cec9306ca00231da6518a123f cve-icon cve-icon
History

Thu, 17 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Free transport channel on IDR failure If transport channel setup succeeds but the following IDR insertion fails, the error path destroys the transport device and frees the channel info without invoking the transport cleanup callback. Call chan_free() before destroying the device so transport specific resources such as IRQs, mailbox channels and mapped shared memory are released consistently with the normal teardown path.
Title firmware: arm_scmi: Free transport channel on IDR failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-17T16:11:05.713Z

Reserved: 2026-09-17T16:02:15.083Z

Link: CVE-2026-93089

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-17T17:18:02.840

Modified: 2026-09-17T17:18:02.840

Link: CVE-2026-93089

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.