Not yet scoredPublished Sep 24, 2026

CVE-2026-93820PCI: rockchip: Protect root bus removal with rescan lock

Updated under an hour ago (Oct 27, 2026, 5:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes. [bhelgaas: commit log]

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 3, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 073d3dbe9a7c38888d8dafe09df421b174a6cffa before 025308e7c9cd10112b73558c9f63f8f7285fa726; from 073d3dbe9a7c38888d8dafe09df421b174a6cffa before ac47d42901859edb504a2890a3a5709c86dbc0c3; from 073d3dbe9a7c38888d8dafe09df421b174a6cffa before eaeb9bed3641741aceb0add84a97023bed61e748; 073d3dbe9a7c38888d8dafe09df421b174a6cffa builds before 5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652; from 073d3dbe9a7c38888d8dafe09df421b174a6cffa before ebca7e5947720e9d4bd918af3e17720270c50744; 073d3dbe9a7c38888d8dafe09df421b174a6cffa builds before 9b19201f57d87c4d0777621275dbc59bff41b7f2; 073d3dbe9a7c38888d8dafe09df421b174a6cffa builds before 0bd9611587bb494c33566d825fe34b2705e4b167	CNA record

References

References

https://git.kernel.org/stable/c/025308e7c9cd10112b73558c9f63f8f7285fa726
https://git.kernel.org/stable/c/ac47d42901859edb504a2890a3a5709c86dbc0c3
https://git.kernel.org/stable/c/eaeb9bed3641741aceb0add84a97023bed61e748
https://git.kernel.org/stable/c/5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652
https://git.kernel.org/stable/c/ebca7e5947720e9d4bd918af3e17720270c50744
https://git.kernel.org/stable/c/9b19201f57d87c4d0777621275dbc59bff41b7f2
https://git.kernel.org/stable/c/0bd9611587bb494c33566d825fe34b2705e4b167

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.