CVE-2026-93821

PCI: altera: Protect root bus removal with rescan lock

N/A

Published: September 24, 2026 at 04:02 PM UTC

Updated: October 3, 2026 at 11:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes. [bhelgaas: commit log]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.3 ≤ v < 5.10.2715.3 ≤ v < 5.15.2225.3 ≤ v < 6.1.1895.3 ≤ v < 6.12.1115.3 ≤ v < 6.18.535.3 ≤ v < 6.6.1585.3 ≤ v < 7.25.3ec15c4d0d5d2e431169fbdf6c6bcf0c8ff71ef22

Vendor states this is fixed in 442b7f2a093b4a75f8963aaa7cbb2b8df35a6ac3 (fixed)

Vendor states this is fixed in 4b69c63cc247fc0f499fbd11076fee9c2a6e6fd7 (fixed)

Vendor states this is fixed in 7cbb8f2750d91e64caff89e164ac8280bb80bedc (fixed)

Vendor states this is fixed in a8759c8ac48c0419f5899e95a6ffc611b07c965b (fixed)

Vendor states this is fixed in c0cd65906e5f7e293ef2568c9524cc0a918333c3 (fixed)

Vendor states this is fixed in cf9d84d1b6a7c3f3780c043df220a7e9e38137eb (fixed)

Vendor states this is fixed in fc462f1bdeaea9789928cbfdf5e069ee559c7642 (fixed)

Vendor states this is fixed in 5.10.271 (unaffected)

Vendor states this is fixed in 5.15.222 (unaffected)

Vendor states this is fixed in 5.3 (unaffected)

Vendor states this is fixed in 6.1.189 (unaffected)

Vendor states this is fixed in 6.12.111 (unaffected)