CVE-2026-93089
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Free transport channel on IDR failure If transport channel setup succeeds but the following IDR insertion fails, the error path destroys the transport device and frees the channel info without invoking the transport cleanup callback. Call chan_free() before destroying the device so transport specific resources such as IRQs, mailbox channels and mapped shared memory are released consistently with the normal teardown path.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux10fae57504ee0ef791d145278b339184cd9db45f, ae7980c9af698d0a7e6790d49249abc71f0fc304, de0a4c103740cf54cf77370d47e03c9aa51aa5ee, d7c60c0fe2bd452b56fe07947842d64da61b7290, fbaebd380caa4e1cec9306ca00231da6518a123f, d72e7e5f24687c0490aabf317653caffe0447aeb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 22f7f35fd71b597a5d916e41d7646be6ee530c86 ≤ v < 10fae57504ee0ef791d145278b339184cd9db45f, 05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 ≤ v < ae7980c9af698d0a7e6790d49249abc71f0fc304, 05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 ≤ v < de0a4c103740cf54cf77370d47e03c9aa51aa5ee, 05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 ≤ v < d7c60c0fe2bd452b56fe07947842d64da61b7290, 05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 ≤ v < fbaebd380caa4e1cec9306ca00231da6518a123f, 05a2801d8b90c1b5159618d4bd3a3c65d60f3ff1 ≤ v < d72e7e5f24687c0490aabf317653caffe0447aeb, 6.3 | 10fae57504ee0ef791d145278b339184cd9db45f, ae7980c9af698d0a7e6790d49249abc71f0fc304, de0a4c103740cf54cf77370d47e03c9aa51aa5ee, d7c60c0fe2bd452b56fe07947842d64da61b7290, fbaebd380caa4e1cec9306ca00231da6518a123f, d72e7e5f24687c0490aabf317653caffe0447aeb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.