CVE-2026-93085

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the arm scmi firmware component where the system fails to properly reject out-of-range Device Tree (DT) protocol IDs. While the DT parsing paths identify protocol IDs that exceed the MSG PROTOCOL ID MASK limit, they only log an error and continue processing the invalid value. This allows a malformed 32-bit DT reg value to reach helper functions that expect a u8 protocol ID, leading to potential truncation or the value being treated as a different protocol. Additionally, during channel setup, two distinct out-of-range values could be used as different IDR keys while aliasing the same generated SCMI protocol identity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.