Threats tagged 'ghsa-5f27-8j35-25fh'

CVE-2026-92506 is a race condition vulnerability in the Linux kernel's arm_scmi firmware component related to device removal. The flaw occurs when two SCMI drivers for the same protocol unregister concurrently, leading to a use-after-free and potential double free of a list head structure. The issue has been fixed by reordering list and IDR updates to complete before releasing the mutex and moving notifier callbacks outside the critical section.