CVE-2026-93052

misc: bcm-vk: Use acquire/release for msgq_inited

N/A
Published: September 17, 2026 at 04:10 PM UTC
Updated: October 19, 2026 at 10:16 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgq_inited bcm_vk_sync_msgq() fills the message queue information and then sets msgq_inited. Readers call bcm_vk_drv_access_ok() before accessing the message queues and their cached queue information. atomic_set()/atomic_read() do not order those accesses. A reader can see msgq_inited set while still seeing stale queue information. Use release when publishing the initialized queues and acquire when checking the gate. Keep the clear in bcm_vk_blk_drv_access() as atomic_set(). It closes the gate and does not publish queue state to readers.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

111d746bb4767ad476f80fe49067e3df3d9a93755.12
Vendor states this is fixed in 1df3926ed8771edf286ff753428b243f334e6041 (fixed)
Vendor states this is fixed in 4984277bc43f84d7506346a09b29af138246d54a (fixed)
Vendor states this is fixed in 61b101c6a150057b6d512421ed108aed16e822ea (fixed)
Vendor states this is fixed in 679cfada6868723ccf162ec3b78c7402ff2405bf (fixed)
Vendor states this is fixed in a45d6dd3c11e921882a2e74c7c8710b975f2eaa7 (fixed)
Vendor states this is fixed in bab66a9e30e39a06f3463b19f8c704386dfd5268 (fixed)
Vendor states this is fixed in f7a8f4cbc8cede0be55220367dc52b126e2d39e5 (fixed)
Vendor states this is fixed in 5.12 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card