CVE-2026-92506

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the arm scmi firmware component. The function scmi protocol device unrequest() releases the scmi requested devices mtx mutex while notifying listeners but maintains the per-protocol list head. If two SCMI drivers for the same protocol unregister simultaneously, one thread may remove the final request and free the list head while another thread is executing its notifier. This leads to a use-after-free scenario where the second thread dereferences the freed list head after reacquiring the mutex and may attempt to free it again.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.