CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock
In the Linux kernel, the following vulnerability has been resolved:
PCI: rockchip: Protect root bus removal with rescan lock
Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead to use-after-free issues or system crashes.
[bhelgaas: commit log]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Hold the pci_rescan_remove_lock lock while stopping and removing a PCI root bus to prevent races with concurrent sysfs-triggered rescan or hotplug operations.
Event History
Frequently Asked Questions
Which systems should be prioritized for review?
Prioritize Linux kernel systems using Rockchip PCI root buses where root-bus removal can overlap with PCI rescan or hotplug operations initiated through sysfs.
What conditions are needed to trigger the issue?
The race requires a root bus to be stopped or removed concurrently with a PCI rescan or hotplug operation triggered via sysfs.
What symptoms could indicate exposure to this race?
The race may result in use-after-free conditions or system crashes. The provided information does not identify any more specific detection indicators.