What’s Vulnerable › Vulnerabilities

CVE-2026-93819: PCI: mediatek: Protect root bus removal with rescan lock

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes. [bhelgaas: commit log]

Affected products

• Linux kernel: 4.20 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/31e33dcc896527b3ad790fdc6aa6b8d2995c078b
• https://git.kernel.org/stable/c/5dd379acfa38c516e904bcfa693502cd585a0bba
• https://git.kernel.org/stable/c/8d910649725955435c6a807944108bca0570712d
• https://git.kernel.org/stable/c/a29812a55da8d0dbeb071b26ac428c338e3fc389
• https://git.kernel.org/stable/c/a568939487dcbc1a3e341208585e224be897e25e
• https://git.kernel.org/stable/c/c57b971765f835138fa2fce3f2a171b004cbb114
• https://git.kernel.org/stable/c/d54417acb22d9e8bc404a8598330bc9729ee7146

Get alerted when CVE-2026-93819 or the next vulnerability affects your stack