CVE-2026-93199

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3c_master_search_i3c_dev_duplicate() searches the bus for another I3C device with the same PID as the reference device. The search can match master->this, causing the controller itself to be returned as a duplicate. Since the controller is not a target device, it cannot be a duplicate of one. Exclude master->this from matching so that the function only returns real duplicate target devices.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/150e71808d3715a0deefbb189c780d03fdbdc735
https://git.kernel.org/stable/c/4dc1b3eeba7991905a5b5b8129ebea51be7d87b7
https://git.kernel.org/stable/c/d0cc00957292e353ad46039034cd8f82fc4f8057

Configurations

No configuration.

History

17 Sep 2026, 17:18

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-17 17:18

Updated : 2026-09-17 17:18

NVD link : CVE-2026-93199

Mitre link : CVE-2026-93199

CVE.ORG link : CVE-2026-93199

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-93199", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0", "lessThan": "d0cc00957292e353ad46039034cd8f82fc4f8057", "versionType": "git"}, {"status": "affected", "version": "3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0", "lessThan": "150e71808d3715a0deefbb189c780d03fdbdc735", "versionType": "git"}, {"status": "affected", "version": "3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0", "lessThan": "4dc1b3eeba7991905a5b5b8129ebea51be7d87b7", "versionType": "git"}], "programFiles": ["drivers/i3c/master.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.0"}, {"status": "unaffected", "version": "0", "lessThan": "5.0", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.52", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.2.6", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/i3c/master.c"], "defaultStatus": "affected"}]}], "published": "2026-09-17T17:18:16.200", "references": [{"url": "https://git.kernel.org/stable/c/150e71808d3715a0deefbb189c780d03fdbdc735", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/4dc1b3eeba7991905a5b5b8129ebea51be7d87b7", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d0cc00957292e353ad46039034cd8f82fc4f8057", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: Do not treat master device as a duplicate target\n\ni3c_master_search_i3c_dev_duplicate() searches the bus for another I3C\ndevice with the same PID as the reference device. The search can match\nmaster->this, causing the controller itself to be returned as a\nduplicate.\n\nSince the controller is not a target device, it cannot be a duplicate of\none. Exclude master->this from matching so that the function only\nreturns real duplicate target devices."}], "lastModified": "2026-09-17T17:18:16.200", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}