CVE-2026-92490

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the arm scmi firmware component where the scmi driver register() function requests protocol devices before registering the driver. If the driver register() function fails, these requests persist in the global IDR (Integer ID Management system) and maintain pointers to the module's ID table. When the failed module load releases that storage, subsequent request matching or SCMI device creation can lead to the dereferencing of stale pointers, potentially causing system instability or crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.