CVE-2026-93260

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the powerpc/xive component. When the xive init ipis() function fails, such as during a failure in irq domain alloc irqs(), the error path frees the global xive ipis array. Because xive smp probe() previously ignored this failure, it would proceed to call xive setup cpu ipi(), which dereferences the already-freed xive ipis pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.