CVE-2026-93098

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock occurs during driver detach in the rpmsg glink implementation. The device core holds a device mutex during the driver's remove callback chain. When the rpmsg endpoint is destroyed, the GLINK implementation calls qcom glink destroy ept(), which subsequently triggers qcom glink remove rpmsg device() and device del(). Because device del() attempts to acquire the same device mutex already held by device release driver internal(), the system hangs indefinitely during module removal (rmmod). This happens because the rpmsg device unregistration within the endpoint destroy process is redundant, as the driver core or the channel close path already handles the unregistration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.