---
id: CVE-2026-93083
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  firmware: arm_scmi: Unwind TX receiver mailbox setup failure

  mailbox_chan_setup() can request an additional unidirectional TX
  receiver channel after successfully acqui…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  firmware: arm_scmi: Unwind TX receiver mailbox setup failure

  mailbox_chan_setup() can request an additional unidirectional TX
  receiver channel after successfully acqui…
severity: medium
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1 <
    babb017cf5e4600c94c23ea87175a0380235a3ee
  - >-
    Linux >= 9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1 <
    717b8e972a667fc1bebe63cbcf0d58e692cbb491
  - >-
    Linux >= 9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1 <
    9958f55eace8b43713c9fc54dcf90e7cdefee413
  - >-
    Linux >= 9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1 <
    6f7c06744d53dc8e047725d411d7f915d9ec35ae
  - Linux 6.4
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:18:02.337'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93083'
references:
  - url: 'https://git.kernel.org/stable/c/6f7c06744d53dc8e047725d411d7f915d9ec35ae'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/717b8e972a667fc1bebe63cbcf0d58e692cbb491'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9958f55eace8b43713c9fc54dcf90e7cdefee413'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/babb017cf5e4600c94c23ea87175a0380235a3ee'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93083.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-93083'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2536232'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-93083'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93083'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93083.mbox
  - url: 'https://git.kernel.org/stable/c/d4cf99c7ea95accde58df34bc8636bbebb3066c2'
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
ingestedAt: '2026-09-17T16:21:47.761Z'
epss: 0.00209
epssPercentile: 0.10965
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe:
  - CWE-772
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Unwind TX receiver mailbox setup failure

mailbox_chan_setup() can request an additional unidirectional TX
receiver channel after successfully acquiring the primary channel. If
that second request fails, the function returns immediately and leaves
the primary channel allocated.

Unwind the primary mailbox channel before returning the error so probe
deferral or other setup failures do not leave the channel busy for later
probe attempts.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-05 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93083.json)