Bug 2536284 (CVE-2026-93090) - CVE-2026-93090 kernel: firmware: arm_scmi: Clean up channels on setup failure
Summary: CVE-2026-93090 kernel: firmware: arm_scmi: Clean up channels on setup failure
Keywords:
Status: NEW
Alias: CVE-2026-93090
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-17 17:15 UTC by OSIDB Bzimport
Modified: 2026-10-05 18:50 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-17 17:15:53 UTC
In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Clean up channels on setup failure

scmi_channels_setup() can fail after the common BASE channel or earlier
protocol channels have already been registered in the TX/RX IDRs.

Route this failure through the existing channel cleanup label so the
transport channels, transport devices and IDR state created before the
failure are released before the probe error path frees the SCMI instance
ID.


Note You need to log in before you can comment on or make changes to this bug.