{"id":"CVE-2026-93084","aliases":[],"cve":{"records":[{"id":"CVE-2026-93084","source":"Linux","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-17T15:57:05.662Z","published":"2026-09-17T16:11:03.659Z","modified":"2026-10-30T12:35:50.721Z"}],"publishers":[{"name":"Linux","role":"CNA","organizationId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","modified":"2026-10-30T12:35:50.721Z"}],"references":[{"url":"https://git.kernel.org/stable/c/b5377e690cd4fe87ee52fcf067c9929414ea8f4e","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/0f860db24ee95e5da4866303a35e55098b9641b3","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/df273eced7cec550465fd1bb82a5d2c3c7d3c437","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/a54dc23e8bd2246c28eafffa60b4634f0d1a11cc","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/77d2985d1e80e67f32026fc03e975c4c83cc543d","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/e3a5c30d233ca5d3e799a80da806554c703bda13","tags":[],"source":"Linux"}],"weaknesses":[],"applicability":[{"source":"Linux","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3","versionEndExcluding":"6.6.157"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3","versionEndExcluding":"6.12.110"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3","versionEndExcluding":"6.18.52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3","versionEndExcluding":"7.2.6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3","versionEndExcluding":"7.3"}]}]}]}],"prioritization":[]},"title":"firmware: arm_scmi: Drop handle on protocol bind failures","titleSource":"Linux","descriptionSource":"Linux","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Drop handle on protocol bind failures\n\nThe SCMI bus notifier acquires an SCMI handle when the driver core emits\nBUS_NOTIFY_BIND_DRIVER, before invoking the protocol driver probe\ncallback. The protocol probe path only checks whether sdev->handle is\nset.\n\nIf device_link_add() fails after the handle has been acquired, the\nprotocol device can still bind with a valid handle but without the\ndependency link to the SCMI parent. A concurrent parent unbind can then\nmiss the child and tear down the SCMI instance while the child still\nholds a handle into it.\n\nIf the protocol driver probe later fails, for example with\n-EPROBE_DEFER, the driver core emits BUS_NOTIFY_DRIVER_NOT_BOUND rather\nthan BUS_NOTIFY_UNBOUND_DRIVER. The SCMI notifier only released the\nhandle on BUS_NOTIFY_UNBOUND_DRIVER, so each failed protocol-device bind\nleaked the SCMI instance users refcount and left sdev->handle set after\nthe failed probe.\n\nMake the link helper report failure and drop the acquired handle if the\nlink cannot be created. Also handle BUS_NOTIFY_DRIVER_NOT_BOUND in the\nsame cleanup path used for unbind so failed probes balance the earlier\nBUS_NOTIFY_BIND_DRIVER acquisition.","score":null,"severity":"unknown","published":"2026-09-17T16:11:03.659Z","modified":"2026-10-30T12:35:50.721Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"b50c9270304cfed6ee1c4ce5036102ad7b762051","status":"affected","lessThan":"b5377e690cd4fe87ee52fcf067c9929414ea8f4e","versionType":"git"},{"version":"971fc0665f1361f23251e4d85fac4aed1b683505","status":"affected","lessThan":"0f860db24ee95e5da4866303a35e55098b9641b3","versionType":"git"},{"version":"971fc0665f1361f23251e4d85fac4aed1b683505","status":"affected","lessThan":"df273eced7cec550465fd1bb82a5d2c3c7d3c437","versionType":"git"},{"version":"971fc0665f1361f23251e4d85fac4aed1b683505","status":"affected","lessThan":"a54dc23e8bd2246c28eafffa60b4634f0d1a11cc","versionType":"git"},{"version":"971fc0665f1361f23251e4d85fac4aed1b683505","status":"affected","lessThan":"77d2985d1e80e67f32026fc03e975c4c83cc543d","versionType":"git"},{"version":"971fc0665f1361f23251e4d85fac4aed1b683505","status":"affected","lessThan":"e3a5c30d233ca5d3e799a80da806554c703bda13","versionType":"git"}],"defaultStatus":"unaffected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-93084"},{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"6.3","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.3","versionType":"semver"},{"version":"6.6.157","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.110","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.52","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.6","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"defaultStatus":"affected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-93084"}],"remediation":[],"references":["https://git.kernel.org/stable/c/b5377e690cd4fe87ee52fcf067c9929414ea8f4e","https://git.kernel.org/stable/c/0f860db24ee95e5da4866303a35e55098b9641b3","https://git.kernel.org/stable/c/df273eced7cec550465fd1bb82a5d2c3c7d3c437","https://git.kernel.org/stable/c/a54dc23e8bd2246c28eafffa60b4634f0d1a11cc","https://git.kernel.org/stable/c/77d2985d1e80e67f32026fc03e975c4c83cc543d","https://git.kernel.org/stable/c/e3a5c30d233ca5d3e799a80da806554c703bda13"],"sources":[{"name":"CVE","id":"CVE-2026-93084","modified":"2026-10-30T12:35:50.721Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-93084"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-10-30T13:54:47.126Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:35:33.875Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":null}