CVE-2026-93089

A flaw was found in the arm_scmi firmware component of the Linux kernel. This vulnerability occurs when a transport channel setup succeeds but the subsequent IDR (ID allocator) insertion fails. In such a scenario, the error handling path incorrectly destroys the transport device and frees channel information without invoking the necessary transport cleanup callback. This oversight can lead to a resource leak, as transport-specific resources like Interrupt ReQuests (IRQs), mailbox channels, and mapped shared memory are not properly released.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.