CVE-2026-93818
Received Received - Intake

PCI Rescan Lock Protection in Linux Kernel

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pci_rescan_remove_lock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes. [bhelgaas: commit log]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93818
EUVD
EUVD-2026-86206

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a race condition in the Linux kernel's PCI subsystem. When a root bus is stopped and removed, the system may not properly lock against concurrent rescan or hotplug operations triggered via sysfs. This can lead to use-after-free issues or system crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's PCI subsystem and may not have direct network detection methods. System-level detection involves checking kernel logs for PCI bus removal issues or crashes during root bus operations. Monitor dmesg or journalctl for PCI-related errors or use-after-free warnings.

Impact Analysis

If exploited, this vulnerability could cause system instability, crashes, or unexpected behavior. It may lead to data corruption or denial of service if the kernel's PCI handling is disrupted during critical operations.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this vulnerability. Avoid manual PCI root bus removal operations via sysfs while the system is running. Monitor system stability and check for kernel updates from your distribution vendor.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93818. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart