CVE-2026-93169

CVE-2026-93169

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: zynqmp_dma: fix race between runtime PM and device removal

In zynqmp_dma_remove(), runtime PM was disabled only after checking

state and doing a manual suspend. This can race with runtime PM in the

remove/unbind (rmmod) path.

Disable runtime PM first, then suspend only if the device is not already

suspended. To prevent any further runtime PM transitions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Published
2026-09-17T21:18Z
References (3)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:12Z
    dmaengine: zynqmp_dma: fix race between runtime PM and device removal
    cvelistv5