{"id":"CVE-2026-93092","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Unregister device notifier before IDR teardown\n\nThe requested-devices notifier looks up protocol fwnodes from the\nactive_protocols IDR","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Unregister device notifier before IDR teardown\n\nThe requested-devices notifier looks up protocol fwnodes from the\nactive_protocols IDR. During remov…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 53b8c25df7082edd78a3fc63e359abee0f28fa70 < 70a26b37389846f1f29a09f7983aa3f45feff529","Linux >= 53b8c25df7082edd78a3fc63e359abee0f28fa70 < 492fb49eac24beecd6d3c5e4744a513e626f8dcf","Linux >= 53b8c25df7082edd78a3fc63e359abee0f28fa70 < f5e528f631425416f9b39e9d8b385c9f1ceb40d6","Linux >= 53b8c25df7082edd78a3fc63e359abee0f28fa70 < 74fcaa0a3f7ad3edfde2e8c6cb8ae457a00e0b7a","Linux >= 53b8c25df7082edd78a3fc63e359abee0f28fa70 < 66a0bbf30cc14140fe13f63cd594a7c1ee352b75","Linux 6.3"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:18:03.177","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93092","references":[{"url":"https://git.kernel.org/stable/c/492fb49eac24beecd6d3c5e4744a513e626f8dcf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/66a0bbf30cc14140fe13f63cd594a7c1ee352b75","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/70a26b37389846f1f29a09f7983aa3f45feff529","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/74fcaa0a3f7ad3edfde2e8c6cb8ae457a00e0b7a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f5e528f631425416f9b39e9d8b385c9f1ceb40d6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-17T16:21:47.759Z","epss":0.00168,"epssPercentile":0.06478,"slug":"CVE-2026-93092","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Unregister device notifier before IDR teardown\n\nThe requested-devices notifier looks up protocol fwnodes from the\nactive_protocols IDR. During remove, unregister the notifier before\nreleasing and destroying active_protocols so no notifier callback can race\nwith the IDR teardown.\n\nKeep the bus notifier registered until after the protocol state is torn\ndown, matching the existing remove ordering for SCMI bus users.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}