« Volver al listado

CVE-2026-93052

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

misc: bcm-vk: Use acquire/release for msgq_inited

bcm_vk_sync_msgq() fills the message queue information and then sets msgq_inited. Readers call bcm_vk_drv_access_ok() before accessing the message queues and their cached queue information.

atomic_set()/atomic_read() do not order those accesses. A reader can see msgq_inited set while still seeing stale queue information. Use release when publishing the initialized queues and acquire when checking the gate.

Keep the clear in bcm_vk_blk_drv_access() as atomic_set(). It closes the gate and does not publish queue state to readers.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-93052",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "111d746bb4767ad476f80fe49067e3df3d9a9375",
              "lessThan": "bab66a9e30e39a06f3463b19f8c704386dfd5268",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "111d746bb4767ad476f80fe49067e3df3d9a9375",
              "lessThan": "679cfada6868723ccf162ec3b78c7402ff2405bf",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "111d746bb4767ad476f80fe49067e3df3d9a9375",
              "lessThan": "f7a8f4cbc8cede0be55220367dc52b126e2d39e5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "111d746bb4767ad476f80fe49067e3df3d9a9375",
              "lessThan": "1df3926ed8771edf286ff753428b243f334e6041",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "111d746bb4767ad476f80fe49067e3df3d9a9375",
              "lessThan": "a45d6dd3c11e921882a2e74c7c8710b975f2eaa7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "111d746bb4767ad476f80fe49067e3df3d9a9375",
              "lessThan": "4984277bc43f84d7506346a09b29af138246d54a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "111d746bb4767ad476f80fe49067e3df3d9a9375",
              "lessThan": "61b101c6a150057b6d512421ed108aed16e822ea",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/misc/bcm-vk/bcm_vk_msg.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.12",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/misc/bcm-vk/bcm_vk_msg.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-17T17:17:58.657",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/1df3926ed8771edf286ff753428b243f334e6041",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/4984277bc43f84d7506346a09b29af138246d54a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/61b101c6a150057b6d512421ed108aed16e822ea",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/679cfada6868723ccf162ec3b78c7402ff2405bf",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a45d6dd3c11e921882a2e74c7c8710b975f2eaa7",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bab66a9e30e39a06f3463b19f8c704386dfd5268",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f7a8f4cbc8cede0be55220367dc52b126e2d39e5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: bcm-vk: Use acquire/release for msgq_inited\n\nbcm_vk_sync_msgq() fills the message queue information and then sets\nmsgq_inited. Readers call bcm_vk_drv_access_ok() before accessing the\nmessage queues and their cached queue information.\n\natomic_set()/atomic_read() do not order those accesses. A reader can see\nmsgq_inited set while still seeing stale queue information. Use release\nwhen publishing the initialized queues and acquire when checking the gate.\n\nKeep the clear in bcm_vk_blk_drv_access() as atomic_set(). It closes the\ngate and does not publish queue state to readers."
    }
  ],
  "lastModified": "2026-09-17T17:17:58.657",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}