CVE-2026-93086

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the arm scmi firmware component where the scmi cleanup channels() function iterates through TX/RX channel IDRs using idr for each() to free transport resources and destroy dedicated transport devices. The destroy callback incorrectly removes entries from the same IDR being walked, which can invalidate the radix-tree iterator state because the iterator has not advanced while the callback is running. Additionally, the callback cannot be protected by rcu read lock() as scmi device destroy() may sleep.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.