---
id: CVE-2026-93083
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  firmware: arm_scmi: Unwind TX receiver mailbox setup failure

  mailbox_chan_setup() can request an additional unidirectional TX
  receiver channel after successfully acqui…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  firmware: arm_scmi: Unwind TX receiver mailbox setup failure

  mailbox_chan_setup() can request an additional unidirectional TX
  receiver channel after successfully acqui…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1 <
    babb017cf5e4600c94c23ea87175a0380235a3ee
  - >-
    Linux >= 9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1 <
    717b8e972a667fc1bebe63cbcf0d58e692cbb491
  - >-
    Linux >= 9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1 <
    9958f55eace8b43713c9fc54dcf90e7cdefee413
  - >-
    Linux >= 9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1 <
    6f7c06744d53dc8e047725d411d7f915d9ec35ae
  - Linux 6.4
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:18:02.337'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93083'
references:
  - url: 'https://git.kernel.org/stable/c/6f7c06744d53dc8e047725d411d7f915d9ec35ae'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/717b8e972a667fc1bebe63cbcf0d58e692cbb491'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9958f55eace8b43713c9fc54dcf90e7cdefee413'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/babb017cf5e4600c94c23ea87175a0380235a3ee'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.761Z'
epss: 0.00168
epssPercentile: 0.06501
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Unwind TX receiver mailbox setup failure

mailbox_chan_setup() can request an additional unidirectional TX
receiver channel after successfully acquiring the primary channel. If
that second request fails, the function returns immediately and leaves
the primary channel allocated.

Unwind the primary mailbox channel before returning the error so probe
deferral or other setup failures do not leave the channel busy for later
probe attempts.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.