CVE-2026-93081

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the arm scmi firmware component where the scmi child dev find() function drops the reference returned by device find child() prematurely. This can lead to a race condition where a concurrent unregister process releases the device while the destroy path is still utilizing the returned pointer. Additionally, the scmi device destroy() function previously allowed the SCMI bus ID to be reused before device del() removed the old device name from sysfs, potentially allowing a new SCMI device to reuse the same ID while the old device remained registered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.