Vulnpedia
← Search CVEs

CVE-2026-93283

N/A

Published 2026-09-24 · Last modified 2026-10-19

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix device_register() error path When device_register() fails in i3c_master_register_new_i3c_devs(), put_device() is called to drop the reference taken by device_register(). That drops the last reference, so the device's release callback i3c_device_release() runs and frees the i3c_device. Two problems follow from that: i3c_device_release() does WARN_ON(i3cdev->desc), so it warns because desc->dev->desc still points back at the descriptor. Clear it before calling put_device(). After put_device() frees the i3c_device, desc->dev is left pointing at freed memory, so clear desc->dev as well. That prevents, for example, i3c_master_unregister_i3c_devs() seeing desc->dev as non-NULL and dereferencing it.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 9th percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

—CVSS · not scored

  • No impact metrics

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Linux

Products Linux

Weakness (CWE)

Not classified.

CVSS vector

Not yet scored.

References and research data (JSON)

Vendor product assessments

Showing 32 of 277 vendor product statements; 245 omitted. Read the full vendor advisory.

  • kernel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-64k-debug-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k-debug-devel

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-64k-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k-devel

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-abi-stablelists as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-abi-stablelists

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-debug-devel-matched as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug-devel-matched

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-devel

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-modules-extra

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-64k-core as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-core

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-debug-modules-extra

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-core as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-core

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-modules

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-modules as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-modules

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-tools-libs-devel

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-zfcpdump-devel

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel.src as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel?arch=src

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • rv as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/rv

    • workaround: To mitigate this vulnerability, prevent the I3C subsystem kernel module from loading on systems where I3C hardware is not required: 1. Create a configuration file to disable the module: # echo "install i3c /bin/true" > /etc/modprobe.d/disable-i3c.conf 2. Blacklist the module: # echo "blacklist i3c" >> /etc/modprobe.d/disable-i3c.conf 3. If the module is already loaded, unload it: # modprobe -r i3c Caveat: Disabling the i3c module prevents the operating system from recognizing and communicating with attached I3C devices and bus controllers. If the module cannot be unloaded because it is in use or built into the active kernel, a system restart is required for these settings to take effect.
    • none available: Affected
    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel as a component of Red Hat Enterprise Linux 6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • python-perf as a component of Red Hat Enterprise Linux 6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/python-perf

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-debug-devel

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • perf as a component of Red Hat Enterprise Linux 7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/perf

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-debug-modules-internal as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-debug-modules-internal

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-debug-kvm

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 8 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-tools-libs-devel

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-64k-core as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-64k-core

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-64k-modules-core as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-64k-modules-core

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-debug-modules-extra

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-modules-partner

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-64k-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-64k-debug-modules-partner

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-debug-devel-matched as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-debug-devel-matched

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-modules-internal

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • kernel-zfcpdump-modules as a component of Red Hat Enterprise Linux 9 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-zfcpdump-modules

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00
  • openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9

    Red Hat · CVE-2026-93283 · Updated 2026-10-08T14:23:21+00:00

References

Advisories

Technical & other

Sources: NVD · CVE.org · EPSS