Skip to main content
VulnerabilityPublished Updated

CVE-2026-93080: Linux kernel · firmware: arm_scmi: Fix transport device teardown lookup

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in c656427440ea627166394d00c4b72147d5d79c60 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 17:16 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 10% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in c656427440ea627166394d00c4b72147d5d79c60, a14dd8fe0a95db638c550ed984cfe2a7428c783d, 4635953b4c1af477e166073521a77de6279f6929

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 17 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to c656427440ea627166394d00c4b72147d5d79c60, a14dd8fe0a95db638c550ed984cfe2a7428c783d or 4635953b4c1af477e166073521a77de6279f6929.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 9593804c44c24545e1b0496786dcb765d7b0e193, < c656427440ea627166394d00c4b72147d5d79c60
Fixed in
  • c656427440ea627166394d00c4b72147d5d79c60
LinuxLinuxAffected
  • ≥ 9593804c44c24545e1b0496786dcb765d7b0e193, < a14dd8fe0a95db638c550ed984cfe2a7428c783d
Fixed in
  • a14dd8fe0a95db638c550ed984cfe2a7428c783d
LinuxLinuxAffected
  • ≥ 9593804c44c24545e1b0496786dcb765d7b0e193, < 4635953b4c1af477e166073521a77de6279f6929
Fixed in
  • 4635953b4c1af477e166073521a77de6279f6929
LinuxLinuxAffected
  • =6.16
Fixed in–

AI-suggested

A fix is available and has been applied in the Linux kernel version 6.16. Users should update to this version or later to remediate the vulnerability. No additional mitigation actions are indicated.

Description

A vulnerability in the Linux kernel's arm_scmi firmware component related to transport device teardown lookup has been fixed. The issue involved improper handling of SCMI transport devices during channel teardown, where duplicate protocol channel setups could cause reuse and unintended destruction of transport devices. The fix separates driver matching from explicit child device lookup and rejects duplicate protocol channel setups to prevent malformed firmware from causing device teardown errors.

References

Community reviews

Loading reviews…