CVE-2026-93090

CVE-2026-93090

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Clean up channels on setup failure

scmi_channels_setup() can fail after the common BASE channel or earlier

protocol channels have already been registered in the TX/RX IDRs.

Route this failure through the existing channel cleanup label so the

transport channels, transport devices and IDR state created before the

failure are released before the probe error path frees the SCMI instance

ID.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-09-17T21:18Z
References (5)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:11Z
    firmware: arm_scmi: Clean up channels on setup failure
    cvelistv5