CVE-2026-93820PCI: rockchip: Protect root bus removal with rescan lock
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes. [bhelgaas: commit log]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 073d3dbe9a7c38888d8dafe09df421b174a6cffa before 025308e7c9cd10112b73558c9f63f8f7285fa726; from 073d3dbe9a7c38888d8dafe09df421b174a6cffa before ac47d42901859edb504a2890a3a5709c86dbc0c3; from 073d3dbe9a7c38888d8dafe09df421b174a6cffa before eaeb9bed3641741aceb0add84a97023bed61e748; 073d3dbe9a7c38888d8dafe09df421b174a6cffa builds before 5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652; from 073d3dbe9a7c38888d8dafe09df421b174a6cffa before ebca7e5947720e9d4bd918af3e17720270c50744; 073d3dbe9a7c38888d8dafe09df421b174a6cffa builds before 9b19201f57d87c4d0777621275dbc59bff41b7f2; 073d3dbe9a7c38888d8dafe09df421b174a6cffa builds before 0bd9611587bb494c33566d825fe34b2705e4b167 | CNA record |
References
- https://git.kernel.org/stable/c/025308e7c9cd10112b73558c9f63f8f7285fa726
- https://git.kernel.org/stable/c/ac47d42901859edb504a2890a3a5709c86dbc0c3
- https://git.kernel.org/stable/c/eaeb9bed3641741aceb0add84a97023bed61e748
- https://git.kernel.org/stable/c/5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652
- https://git.kernel.org/stable/c/ebca7e5947720e9d4bd918af3e17720270c50744
- https://git.kernel.org/stable/c/9b19201f57d87c4d0777621275dbc59bff41b7f2
- https://git.kernel.org/stable/c/0bd9611587bb494c33566d825fe34b2705e4b167
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.