CVE-2026-93200 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, system administrators responsible for Linux kernel updates and security patches, and security teams should be aware of this vulnerability. They should verify Linux kernel versions and apply patches to fix the vulnerability, review system configurations, and ensure sysfs attribute callbacks are properly handled. Additionally, they should monitor system logs for potential use-after-free errors and track exceptions, re

Why it matters

A use-after-free vulnerability in the Linux kernel's i3c master controller device can lead to system crashes or potential code execution. Linux kernel developers and maintainers should verify kernel versions and apply patches to fix the vulnerability. System administrators responsible for Linux kernel updates and security patches should review system configurations and ensure sysfs attribute callbacks are properly handled.

• Verify Linux kernel versions and apply patches to fix the vulnerability
• Review system configurations and ensure sysfs attribute callbacks are properly handled
• Monitor system logs for potential use-after-free errors

Technical summary

The Linux kernel's i3c master controller device has a use-after-free vulnerability. Sysfs attribute callbacks for the master controller device dereference master->this, which is freed in i3c_master_detach_free_devs() before the master device itself is released. This can lead to a use-after-free when accessing sysfs attributes. The vulnerability affects Linux kernel developers and maintainers, who should verify kernel versions and apply patches to fix the vulnerability. System administrators responsible for Linux kernel updates and security patches should review system configurations and ensure sysfs attribute callbacks are properly handled.

Defensive priority

Verify Linux kernel versions and apply patches to fix the vulnerability.

Recommended defensive actions

• Verify Linux kernel versions and apply patches to fix the vulnerability.
• Review system configurations and ensure sysfs attribute callbacks are properly handled.
• Monitor system logs for potential use-after-free errors.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but do not specify affected or fixed versions. Linux kernel maintainers have resolved the issue. The vulnerability has been publicly disclosed and defenders should verify Linux kernel versions and apply patches to fix the vulnerability. The issue is related to the i3c master controller device and sysfs attribute callbacks. The vulnerability can lead to system crashes or potential code execution.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.