CVE-2026-93083
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scmi: Unwind TX receiver mailbox setup failure
mailbox_chan_setup() can request an additional unidirectional TX receiver channel after successfully acquiring the primary channel. If that second request fails, the function returns immediately and leaves the primary channel allocated.
Unwind the primary mailbox channel before returning the error so probe deferral or other setup failures do not leave the channel busy for later probe attempts.
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.21%
- Percentil entre todas las CVEs puntuadas: 10
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-93083",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1",
"lessThan": "babb017cf5e4600c94c23ea87175a0380235a3ee",
"versionType": "git"
},
{
"status": "affected",
"version": "9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1",
"lessThan": "717b8e972a667fc1bebe63cbcf0d58e692cbb491",
"versionType": "git"
},
{
"status": "affected",
"version": "9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1",
"lessThan": "9958f55eace8b43713c9fc54dcf90e7cdefee413",
"versionType": "git"
},
{
"status": "affected",
"version": "9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1",
"lessThan": "6f7c06744d53dc8e047725d411d7f915d9ec35ae",
"versionType": "git"
}
],
"programFiles": [
"drivers/firmware/arm_scmi/transports/mailbox.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.4"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.4",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.12.110",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.52",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.6",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3-rc1",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/firmware/arm_scmi/transports/mailbox.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-09-17T17:18:02.337",
"references": [
{
"url": "https://git.kernel.org/stable/c/6f7c06744d53dc8e047725d411d7f915d9ec35ae",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/717b8e972a667fc1bebe63cbcf0d58e692cbb491",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/9958f55eace8b43713c9fc54dcf90e7cdefee413",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/babb017cf5e4600c94c23ea87175a0380235a3ee",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Unwind TX receiver mailbox setup failure\n\nmailbox_chan_setup() can request an additional unidirectional TX\nreceiver channel after successfully acquiring the primary channel. If\nthat second request fails, the function returns immediately and leaves\nthe primary channel allocated.\n\nUnwind the primary mailbox channel before returning the error so probe\ndeferral or other setup failures do not leave the channel busy for later\nprobe attempts."
}
],
"lastModified": "2026-09-17T17:18:02.337",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}