---
id: CVE-2026-92490
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  firmware: arm_scmi: Unrequest devices if driver registration fails

  scmi_driver_register() requests protocol devices before registering the
  driver
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  firmware: arm_scmi: Unrequest devices if driver registration fails

  scmi_driver_register() requests protocol devices before registering the
  driver. If driver_register()…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 <
    524e57035af2d32498af9dd8fa6fdc92fcc8f80a
  - >-
    Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 <
    06e65e07a1bcb39a1ebc8bb89a981f8e07900497
  - >-
    Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 <
    a76b20b1f03099204db29b90e1024fe1c2b2cdd7
  - >-
    Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 <
    4520d4a1db37198756ad23568e36cdf091b6ffff
  - >-
    Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 <
    9f7cd6a62aa754ed6b48cbd5d50de40add1bcc86
  - Linux 6.3
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:51.123'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92490'
references:
  - url: 'https://git.kernel.org/stable/c/06e65e07a1bcb39a1ebc8bb89a981f8e07900497'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4520d4a1db37198756ad23568e36cdf091b6ffff'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/524e57035af2d32498af9dd8fa6fdc92fcc8f80a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9f7cd6a62aa754ed6b48cbd5d50de40add1bcc86'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a76b20b1f03099204db29b90e1024fe1c2b2cdd7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.785Z'
epss: 0.00209
epssPercentile: 0.09965
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Unrequest devices if driver registration fails

scmi_driver_register() requests protocol devices before registering the
driver. If driver_register() fails, those requests remain in the global
IDR and retain pointers to the module's ID table. Once the failed module
load releases that storage, later request matching or SCMI device creation
can dereference the stale pointers.

Unrequest the complete protocol table before returning the registration
failure. At this point table registration succeeded, so every entry is
owned by the current registration attempt.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.