firmware: arm_scmi: Unwind TX receiver mailbox setup failure

{
  "id": "cbab77226b3c3b493f91050b9d80bd1ba43085fe8d669020f574fc5cbd4304bf",
  "url": "https://osv.dev/vulnerability/CVE-2026-93083",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "firmware: arm_scmi: Unwind TX receiver mailbox setup failure",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unwind TX receiver mailbox setup failure mailbox_chan_setup() can request an additional unidirectional TX receiver channel after successfully acquiring the primary channel. If that second request fails, the function returns immediately and leaves the primary channel allocated. Unwind the primary mailbox channel before returning the error so probe deferral or other setup failures do not leave the channel busy for later probe attempts.",
    "evidence": "osv:CVE-2026-93083",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.6.160",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.110",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.18.52",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "7.2.6",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2026-93083",
      "aliases": [
        "CVE-2026-93083"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "9f68ff79ec2cb303f360a35eef5dd8f1f0f817e1"
                },
                {
                  "fixed": "d4cf99c7ea95accde58df34bc8636bbebb3066c2"
                },
                {
                  "fixed": "babb017cf5e4600c94c23ea87175a0380235a3ee"
                },
                {
                  "fixed": "717b8e972a667fc1bebe63cbcf0d58e692cbb491"
                },
                {
                  "fixed": "9958f55eace8b43713c9fc54dcf90e7cdefee413"
                },
                {
                  "fixed": "6f7c06744d53dc8e047725d411d7f915d9ec35ae"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93083.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.4.0"
                },
                {
                  "fixed": "6.6.160"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.110"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.18.52"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.19.0"
                },
                {
                  "fixed": "7.2.6"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93083.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:26.458419070Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/6f7c06744d53dc8e047725d411d7f915d9ec35ae",
        "https://git.kernel.org/stable/c/717b8e972a667fc1bebe63cbcf0d58e692cbb491",
        "https://git.kernel.org/stable/c/9958f55eace8b43713c9fc54dcf90e7cdefee413",
        "https://git.kernel.org/stable/c/babb017cf5e4600c94c23ea87175a0380235a3ee",
        "https://git.kernel.org/stable/c/d4cf99c7ea95accde58df34bc8636bbebb3066c2",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93083.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-93083",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93083.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-93083",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 493084,
  "published_at": "2026-09-17T16:11:02.997+00:00"
}