---
id: CVE-2026-93082
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  firmware: arm_scmi: Unwind P2A receiver mailbox setup failure

  mailbox_chan_setup() can request an additional P2A receiver channel after
  successfully acquiring the prim…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  firmware: arm_scmi: Unwind P2A receiver mailbox setup failure

  mailbox_chan_setup() can request an additional P2A receiver channel after
  successfully acquiring the prim…
severity: medium
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= fa8b28ba22d95be4d2dd3c37fbdbdc066af82941 <
    4c2a5d72357e5c6743c23b59615da287140d9d31
  - >-
    Linux >= fa8b28ba22d95be4d2dd3c37fbdbdc066af82941 <
    3b0b02134ab90202af80b102fa37196b9689e86f
  - >-
    Linux >= fa8b28ba22d95be4d2dd3c37fbdbdc066af82941 <
    3515aed7fe424b79c49ff9cd51f7802a64a4ab7b
  - >-
    Linux >= fa8b28ba22d95be4d2dd3c37fbdbdc066af82941 <
    f3e3773c4e5e96549d7540d8ddeb4fcd534f6f1d
  - Linux 6.11
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:18:02.193'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93082'
references:
  - url: 'https://git.kernel.org/stable/c/3515aed7fe424b79c49ff9cd51f7802a64a4ab7b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3b0b02134ab90202af80b102fa37196b9689e86f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4c2a5d72357e5c6743c23b59615da287140d9d31'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f3e3773c4e5e96549d7540d8ddeb4fcd534f6f1d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93082.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-93082'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2536651'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-93082'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93082'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93082.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
ingestedAt: '2026-09-17T16:21:47.762Z'
epss: 0.00209
epssPercentile: 0.10949
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe:
  - CWE-772
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Unwind P2A receiver mailbox setup failure

mailbox_chan_setup() can request an additional P2A receiver channel after
successfully acquiring the primary P2A channel. If that later request
fails, the function returns immediately and leaves the primary channel
allocated.

Unwind the primary mailbox channel before returning the error so probe
deferral or other setup failures do not leave the channel busy for later
probe attempts.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-05 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93082.json)