Unrated severityNVD Advisory· Published Sep 17, 2026· Updated Oct 30, 2026
CVE-2026-93199
CVE-2026-93199
Description
In the Linux kernel, the following vulnerability has been resolved:
i3c: master: Do not treat master device as a duplicate target
i3c_master_search_i3c_dev_duplicate() searches the bus for another I3C device with the same PID as the reference device. The search can match master->this, causing the controller itself to be returned as a duplicate.
Since the controller is not a target device, it cannot be a duplicate of one. Exclude master->this from matching so that the function only returns real duplicate target devices.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords2 versions
>= 5.0.0, < 5.10.273+ 1 more
- (no CPE)range: >= 5.0.0, < 5.10.273
- (no CPE)range: < 7.2.7-1.1
Patches
Vulnerability mechanics
References
8- git.kernel.org/stable/c/150e71808d3715a0deefbb189c780d03fdbdc735nvd
- git.kernel.org/stable/c/3728d90ec66d4ad33d357e7d6e82b02d34e1c99cnvd
- git.kernel.org/stable/c/4dc1b3eeba7991905a5b5b8129ebea51be7d87b7nvd
- git.kernel.org/stable/c/533faf3d2e67ded0a62b7ba753c0fe993d1dfc26nvd
- git.kernel.org/stable/c/6f2340857fc206e7ebfc50c568fb65c3055e568bnvd
- git.kernel.org/stable/c/7b25b755d59077dd9484ba1360b8fe6396e5ccfbnvd
- git.kernel.org/stable/c/d0cc00957292e353ad46039034cd8f82fc4f8057nvd
- git.kernel.org/stable/c/d72a5e9060030a1c205b54157c15a428b741d83fnvd
News mentions
2- Linux Kernel: 25 Vulnerabilities Disclosed Together on September 17, 2026Vypr Intelligence · Sep 17, 2026
- Android SDK: 25 Linux Kernel Vulnerabilities Disclosed Together on September 17, 2026Vypr Intelligence · Sep 17, 2026