What’s Vulnerable › Vulnerabilities

CVE-2026-93083: firmware: arm_scmi: Unwind TX receiver mailbox setup failure

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-21

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unwind TX receiver mailbox setup failure mailbox_chan_setup() can request an additional unidirectional TX receiver channel after successfully acquiring the primary channel. If that second request fails, the function returns immediately and leaves the primary channel allocated. Unwind the primary mailbox channel before returning the error so probe deferral or other setup failures do not leave the channel busy for later probe attempts.

Affected products

• Linux kernel: 6.4 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/6f7c06744d53dc8e047725d411d7f915d9ec35ae
• https://git.kernel.org/stable/c/717b8e972a667fc1bebe63cbcf0d58e692cbb491
• https://git.kernel.org/stable/c/9958f55eace8b43713c9fc54dcf90e7cdefee413
• https://git.kernel.org/stable/c/babb017cf5e4600c94c23ea87175a0380235a3ee
• https://git.kernel.org/stable/c/d4cf99c7ea95accde58df34bc8636bbebb3066c2

Get alerted when CVE-2026-93083 or the next vulnerability affects your stack