Log in Start free

Vulnerability · Published Sep 17, 2026 · Assigned by Linux

CVE-2026-92506firmware: arm_scmi: Fix requested device removal race

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 89.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix requested device removal race scmi_protocol_device_unrequest() drops scmi_requested_devices_mtx while notifying listeners but continues to retain the per-protocol list head. When two SCMI drivers for the same protocol unregister concurrently, one thread can remove the final request and free the list head while the other is running its notifier. The latter then dereferences the freed list head after reacquiring the mutex and can free it a second time. Complete the list and IDR updates, including freeing an empty list head, before dropping the mutex. Keep the blocking notifier outside the critical section and retain only the detached request across the callback.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.12.111-1DEBIAN-CVE-2026-92506
Debian:14linux7.2.6-1DEBIAN-CVE-2026-92506
Debian:12linux-6.126.12.111-1~deb12u1DEBIAN-CVE-2026-92506
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-92506
Ubuntu:26.04:LTSlinux-riscv7.0.0-42.42.1UBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-42.42.1~24.04.1UBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-92506
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-92506
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-92506

Affected products (as reported)

VendorProductVersions
Linux Linux a6fe96b2e371d5fd300cca24459cdcf471c2c741 – before 803e50af43ab1c3f76cbc744e496532ec151f305d3cd7c525fd2ecce3a6c963f314969a54783d211 – before 2ff7713b7308cd6bea3328f7cd750b5eaab42af3d3cd7c525fd2ecce3a6c963f314969a54783d211 – before 1c35915eaaa81a12340c838c5c2ccb02be2194c3d3cd7c525fd2ecce3a6c963f314969a54783d211 – before c3d4ef1c0ca6917aad6f1093b49f3932944a8c19d3cd7c525fd2ecce3a6c963f314969a54783d211 – before 21d35c5f46e99e9047bb9ded3ecb5ab440dd75b3d3cd7c525fd2ecce3a6c963f314969a54783d211 – before 2c4097e6c4aed276c5e9ec2ab331ab397ea780bf
Linux Linux 6.3

References