CVE-2026-92490

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Unrequest devices if driver registration fails

scmi_driver_register() requests protocol devices before registering the

driver. If driver_register() fails, those requests remain in the global

IDR and retain pointers to the module's ID table. Once the failed module

load releases that storage, later request matching or SCMI device creation

can dereference the stale pointers.

Unrequest the complete protocol table before returning the registration

failure. At this point table registration succeeded, so every entry is

owned by the current registration attempt.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References