What’s Vulnerable › Vulnerabilities

CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes. [bhelgaas: commit log]

Affected products

• Linux kernel: 4.12 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/025308e7c9cd10112b73558c9f63f8f7285fa726
• https://git.kernel.org/stable/c/0bd9611587bb494c33566d825fe34b2705e4b167
• https://git.kernel.org/stable/c/5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652
• https://git.kernel.org/stable/c/9b19201f57d87c4d0777621275dbc59bff41b7f2
• https://git.kernel.org/stable/c/ac47d42901859edb504a2890a3a5709c86dbc0c3
• https://git.kernel.org/stable/c/eaeb9bed3641741aceb0add84a97023bed61e748
• https://git.kernel.org/stable/c/ebca7e5947720e9d4bd918af3e17720270c50744

Get alerted when CVE-2026-93820 or the next vulnerability affects your stack