PCI: rockchip: Protect root bus removal with rescan lock
Summary
| CVE | CVE-2026-93820 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-09-24 17:17:15 UTC |
| Updated | 2026-10-03 11:17:51 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes. [bhelgaas: commit log] |
Risk And Classification
EPSS: 0.001730000 probability, percentile 0.060280000 (date 2026-10-05)
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected 073d3dbe9a7c38888d8dafe09df421b174a6cffa 025308e7c9cd10112b73558c9f63f8f7285fa726 git | Not specified |
| CNA | Linux | Linux | affected 073d3dbe9a7c38888d8dafe09df421b174a6cffa ac47d42901859edb504a2890a3a5709c86dbc0c3 git | Not specified |
| CNA | Linux | Linux | affected 073d3dbe9a7c38888d8dafe09df421b174a6cffa eaeb9bed3641741aceb0add84a97023bed61e748 git | Not specified |
| CNA | Linux | Linux | affected 073d3dbe9a7c38888d8dafe09df421b174a6cffa 5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652 git | Not specified |
| CNA | Linux | Linux | affected 073d3dbe9a7c38888d8dafe09df421b174a6cffa ebca7e5947720e9d4bd918af3e17720270c50744 git | Not specified |
| CNA | Linux | Linux | affected 073d3dbe9a7c38888d8dafe09df421b174a6cffa 9b19201f57d87c4d0777621275dbc59bff41b7f2 git | Not specified |
| CNA | Linux | Linux | affected 073d3dbe9a7c38888d8dafe09df421b174a6cffa 0bd9611587bb494c33566d825fe34b2705e4b167 git | Not specified |
| CNA | Linux | Linux | affected 4.12 | Not specified |
| CNA | Linux | Linux | unaffected 4.12 semver | Not specified |
| CNA | Linux | Linux | unaffected 5.10.271 5.10.* semver | Not specified |
| CNA | Linux | Linux | unaffected 5.15.222 5.15.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.1.189 6.1.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.158 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.12.111 6.12.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.18.53 6.18.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.2 * original_commit_for_fix | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/9b19201f57d87c4d0777621275dbc59bff41b7f2 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/0bd9611587bb494c33566d825fe34b2705e4b167 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/eaeb9bed3641741aceb0add84a97023bed61e748 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/ebca7e5947720e9d4bd918af3e17720270c50744 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/025308e7c9cd10112b73558c9f63f8f7285fa726 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/ac47d42901859edb504a2890a3a5709c86dbc0c3 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.