CVE-2026-93199i3c: master: Do not treat master device as a duplicate target
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3c_master_search_i3c_dev_duplicate() searches the bus for another I3C device with the same PID as the reference device. The search can match master->this, causing the controller itself to be returned as a duplicate. Since the controller is not a target device, it cannot be a duplicate of one. Exclude master->this from matching so that the function only returns real duplicate target devices.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 before 533faf3d2e67ded0a62b7ba753c0fe993d1dfc26; from 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 before d0cc00957292e353ad46039034cd8f82fc4f8057; from 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 before 150e71808d3715a0deefbb189c780d03fdbdc735; from 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 before 4dc1b3eeba7991905a5b5b8129ebea51be7d87b7 | CNA record |
References
- https://git.kernel.org/stable/c/533faf3d2e67ded0a62b7ba753c0fe993d1dfc26
- https://git.kernel.org/stable/c/d0cc00957292e353ad46039034cd8f82fc4f8057
- https://git.kernel.org/stable/c/150e71808d3715a0deefbb189c780d03fdbdc735
- https://git.kernel.org/stable/c/4dc1b3eeba7991905a5b5b8129ebea51be7d87b7
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.