{"id":"CVE-2026-93819","summary":"PCI: mediatek: Protect root bus removal with rescan lock","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: mediatek: Protect root bus removal with rescan lock\n\nHold the pci_rescan_remove_lock lock while stopping and removing a root bus\nto avoid racing with concurrent rescan or hotplug operations triggered via\nsysfs.  Such races may lead to use-after-free issues or system crashes.\n\n[bhelgaas: commit log]","modified":"2026-10-22T10:35:20.491871168Z","published":"2026-09-24T16:02:56.394Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93819.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/31e33dcc896527b3ad790fdc6aa6b8d2995c078b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5dd379acfa38c516e904bcfa693502cd585a0bba"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8d910649725955435c6a807944108bca0570712d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a29812a55da8d0dbeb071b26ac428c338e3fc389"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a568939487dcbc1a3e341208585e224be897e25e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c57b971765f835138fa2fce3f2a171b004cbb114"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d54417acb22d9e8bc404a8598330bc9729ee7146"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93819.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93819"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"031337ace2d1c22a447da6390716fe92592cdd6e"},{"fixed":"d54417acb22d9e8bc404a8598330bc9729ee7146"},{"fixed":"5dd379acfa38c516e904bcfa693502cd585a0bba"},{"fixed":"8d910649725955435c6a807944108bca0570712d"},{"fixed":"31e33dcc896527b3ad790fdc6aa6b8d2995c078b"},{"fixed":"c57b971765f835138fa2fce3f2a171b004cbb114"},{"fixed":"a568939487dcbc1a3e341208585e224be897e25e"},{"fixed":"a29812a55da8d0dbeb071b26ac428c338e3fc389"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-93819.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.20.0"},{"fixed":"5.10.271"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.222"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.189"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.158"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.111"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.53"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-93819.json"}}],"schema_version":"1.9.2"}