CVE-2026-93199

Source
https://cve.org/CVERecord?id=CVE-2026-93199
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93199.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-93199
Downstream
Related
Published
2026-09-17T16:12:21Z
Modified
2026-10-05T02:30:16Z
Summary
i3c: master: Do not treat master device as a duplicate target
Details

In the Linux kernel, the following vulnerability has been resolved:

i3c: master: Do not treat master device as a duplicate target

i3c_master_search_i3c_dev_duplicate() searches the bus for another I3C device with the same PID as the reference device. The search can match master->this, causing the controller itself to be returned as a duplicate.

Since the controller is not a target device, it cannot be a duplicate of one. Exclude master->this from matching so that the function only returns real duplicate target devices.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93199.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0
Fixed
533faf3d2e67ded0a62b7ba753c0fe993d1dfc26
Fixed
d0cc00957292e353ad46039034cd8f82fc4f8057
Fixed
150e71808d3715a0deefbb189c780d03fdbdc735
Fixed
4dc1b3eeba7991905a5b5b8129ebea51be7d87b7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93199.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.52
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93199.json"