{"schema":"threatline.record/2","record":{"id":"CVE-2026-93819","aliases":[],"summary":"PCI: mediatek: Protect root bus removal with rescan lock","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: mediatek: Protect root bus removal with rescan lock\n\nHold the pci_rescan_remove_lock lock while stopping and removing a root bus\nto avoid racing with concurrent rescan or hotplug operations triggered via\nsysfs.  Such races may lead to use-after-free issues or system crashes.\n\n[bhelgaas: commit log]","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93819","source_modified_at":"2026-10-03T10:57:50.269Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"031337ace2d1c22a447da6390716fe92592cdd6e","lessThan":"d54417acb22d9e8bc404a8598330bc9729ee7146","status":"affected","versionType":"git"},{"version":"031337ace2d1c22a447da6390716fe92592cdd6e","lessThan":"5dd379acfa38c516e904bcfa693502cd585a0bba","status":"affected","versionType":"git"},{"version":"031337ace2d1c22a447da6390716fe92592cdd6e","lessThan":"8d910649725955435c6a807944108bca0570712d","status":"affected","versionType":"git"},{"version":"031337ace2d1c22a447da6390716fe92592cdd6e","lessThan":"31e33dcc896527b3ad790fdc6aa6b8d2995c078b","status":"affected","versionType":"git"},{"version":"031337ace2d1c22a447da6390716fe92592cdd6e","lessThan":"c57b971765f835138fa2fce3f2a171b004cbb114","status":"affected","versionType":"git"},{"version":"031337ace2d1c22a447da6390716fe92592cdd6e","lessThan":"a568939487dcbc1a3e341208585e224be897e25e","status":"affected","versionType":"git"},{"version":"031337ace2d1c22a447da6390716fe92592cdd6e","lessThan":"a29812a55da8d0dbeb071b26ac428c338e3fc389","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93819","source_modified_at":"2026-10-03T10:57:50.269Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"4.20","status":"affected"},{"version":"0","lessThan":"4.20","status":"unaffected","versionType":"semver"},{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93819","source_modified_at":"2026-10-03T10:57:50.269Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"5dd379acfa38c516e904bcfa693502cd585a0bba","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93819","source_modified_at":"2026-10-03T10:57:50.269Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"8d910649725955435c6a807944108bca0570712d","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93819","source_modified_at":"2026-10-03T10:57:50.269Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"31e33dcc896527b3ad790fdc6aa6b8d2995c078b","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00173,"percentile":0.06357,"score_date":"2026-10-23"},"published_at":"2026-09-24T16:02:56.394Z","modified_at":"2026-10-03T10:57:50.269Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-93819","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-03T10:57:50.269Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-93819","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/d54417acb22d9e8bc404a8598330bc9729ee7146"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/5dd379acfa38c516e904bcfa693502cd585a0bba"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/8d910649725955435c6a807944108bca0570712d"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/31e33dcc896527b3ad790fdc6aa6b8d2995c078b"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/c57b971765f835138fa2fce3f2a171b004cbb114"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/a568939487dcbc1a3e341208585e224be897e25e"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/a29812a55da8d0dbeb071b26ac428c338e3fc389"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-03T10:57:50.269Z","content_hash":"04f8d51b912af937cbef0e77b0355904bc49dff1d9010b7cbbb01903696ce86a"}}