CVE-2026-93145
kernel: clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 6, 2026
Description
A flaw was found in the Linux kernel's Qualcomm (QCOM) Generic Power Domain Controller (GDSC) driver. When a GDSC provider is unregistered, the driver fails to properly remove generic power domain entries from a global list. This oversight can lead to dangling entries, causing subsequent attempts to re-register a power domain with the same name to fail. A local attacker could potentially trigger a provider unbind/rebind cycle, leading to a denial of service for affected power domains.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime