What’s Vulnerable › Vulnerabilities

CVE-2026-93090: firmware: arm_scmi: Clean up channels on setup failure

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Clean up channels on setup failure scmi_channels_setup() can fail after the common BASE channel or earlier protocol channels have already been registered in the TX/RX IDRs. Route this failure through the existing channel cleanup label so the transport channels, transport devices and IDR state created before the failure are released before the probe error path frees the SCMI instance ID.

Affected products

• Linux: from 6.1.191 before 6.2 — fixed in 6.2

How to fix

Upgrade to a fixed version: Linux 6.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/43aad7687238d6178cb3fdac53c8de3f43bfa028
• https://git.kernel.org/stable/c/687d67be3d87894ef12e8a164434612e0b53cfae
• https://git.kernel.org/stable/c/b8479e1f0219cf18bfdfeca97994e563a0afb602
• https://git.kernel.org/stable/c/d33b2b68bce6d5e28ee77f0952d7f3dc82bbe610
• https://git.kernel.org/stable/c/e835bd88ce9ddd858c186317f79e76ffa689c8db

Get alerted when CVE-2026-93090 or the next vulnerability affects your stack