{"id":"CVE-2026-92490","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Unrequest devices if driver registration fails\n\nscmi_driver_register() requests protocol devices before registering the\ndriver","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Unrequest devices if driver registration fails\n\nscmi_driver_register() requests protocol devices before registering the\ndriver. If driver_register()…","severity":"medium","vendor":"Linux","product":"Linux","affected":["Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 < 524e57035af2d32498af9dd8fa6fdc92fcc8f80a","Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 < 06e65e07a1bcb39a1ebc8bb89a981f8e07900497","Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 < a76b20b1f03099204db29b90e1024fe1c2b2cdd7","Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 < 4520d4a1db37198756ad23568e36cdf091b6ffff","Linux >= d3cd7c525fd2ecce3a6c963f314969a54783d211 < 9f7cd6a62aa754ed6b48cbd5d50de40add1bcc86","Linux 6.3"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:17:51.123","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92490","references":[{"url":"https://git.kernel.org/stable/c/06e65e07a1bcb39a1ebc8bb89a981f8e07900497","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4520d4a1db37198756ad23568e36cdf091b6ffff","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/524e57035af2d32498af9dd8fa6fdc92fcc8f80a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9f7cd6a62aa754ed6b48cbd5d50de40add1bcc86","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a76b20b1f03099204db29b90e1024fe1c2b2cdd7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92490.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-92490"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2536261"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92490"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92490"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-92490.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ingestedAt":"2026-09-17T16:21:47.785Z","epss":0.00209,"epssPercentile":0.10937,"cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":["CWE-825"],"slug":"CVE-2026-92490","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Unrequest devices if driver registration fails\n\nscmi_driver_register() requests protocol devices before registering the\ndriver. If driver_register() fails, those requests remain in the global\nIDR and retain pointers to the module's ID table. Once the failed module\nload releases that storage, later request matching or SCMI device creation\ncan dereference the stale pointers.\n\nUnrequest the complete protocol table before returning the registration\nfailure. At this point table registration succeeded, so every entry is\nowned by the current registration attempt.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-20 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92490.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":225557,"id":"CVE-2026-92490","ts":1792498295516,"field":"cvss","old":null,"new":"5.5"},{"seq":225556,"id":"CVE-2026-92490","ts":1792498295516,"field":"severity","old":"none","new":"medium"}]}