What’s Vulnerable › Vulnerabilities

CVE-2026-93082: firmware: arm_scmi: Unwind P2A receiver mailbox setup failure

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unwind P2A receiver mailbox setup failure mailbox_chan_setup() can request an additional P2A receiver channel after successfully acquiring the primary P2A channel. If that later request fails, the function returns immediately and leaves the primary channel allocated. Unwind the primary mailbox channel before returning the error so probe deferral or other setup failures do not leave the channel busy for later probe attempts.

Affected products

• Linux kernel: 6.11 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3515aed7fe424b79c49ff9cd51f7802a64a4ab7b
• https://git.kernel.org/stable/c/3b0b02134ab90202af80b102fa37196b9689e86f
• https://git.kernel.org/stable/c/4c2a5d72357e5c6743c23b59615da287140d9d31
• https://git.kernel.org/stable/c/f3e3773c4e5e96549d7540d8ddeb4fcd534f6f1d

Get alerted when CVE-2026-93082 or the next vulnerability affects your stack