{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "1832ed55df45f4145335ad992fb83813cdc58b5d"
            },
            {
              "fixed": "5bf498623f8397d45f85f14cd631c5e5a565c2fb"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "d48fe8d98171e0fffdeaa8b37ce0a6444bff819b"
            },
            {
              "fixed": "20a2b6df91fd782ef2ff551febef594d0b46a9a7"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "174ae0a3b89e7804e4ea3d31bd83d6e43f39568c"
            },
            {
              "fixed": "a14dbdf471001dd0601b0c491184990c178a199c"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "e49a51a96b531f1b4bcd8d358e645b6c74ef67e6"
            },
            {
              "fixed": "d22ad96f1a0c89e0ba66a2facc7430f0923919e3"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "cab63f64887616e3c4e31cfd8103320be6ebc8d3"
            },
            {
              "fixed": "7f8e2c4f3704d9774bb26b49b1ad6a60ae57d4a0"
            },
            {
              "fixed": "7ef12e1dd06e442eebf370f6e53c41bd056d0f22"
            },
            {
              "fixed": "6ecf17bf5fe8da51a6e3fc9e03a76898fcc5c6cf"
            },
            {
              "fixed": "74be657d98a8d684c0475f3cbd450ef2a30ffc73"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "204beeb509d37669de34560e83bb8abffe7ee63a"
            },
            {
              "last_affected": "b24cf43d9babf1265a2bb0ae8d198267cef43b83"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "5.10.201"
            },
            {
              "fixed": "5.10.270"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "5.15.139"
            },
            {
              "fixed": "5.15.221"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.1.63"
            },
            {
              "fixed": "6.1.188"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.6.2"
            },
            {
              "fixed": "6.6.157"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "5.4.261"
            },
            {
              "fixed": "5.5"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.5.12"
            },
            {
              "fixed": "6.6"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.10.270"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "5.15.221"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.1.188"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.157"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.110"
            },
            {
              "fixed": "6.18.52"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "7.2.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93283.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: Fix device_register() error path\n\nWhen device_register() fails in i3c_master_register_new_i3c_devs(),\nput_device() is called to drop the reference taken by\ndevice_register().  That drops the last reference, so the device's\nrelease callback i3c_device_release() runs and frees the i3c_device.\n\nTwo problems follow from that:\n\ni3c_device_release() does WARN_ON(i3cdev-\u003edesc), so it warns because\ndesc-\u003edev-\u003edesc still points back at the descriptor.  Clear it before\ncalling put_device().\n\nAfter put_device() frees the i3c_device, desc-\u003edev is left pointing at\nfreed memory, so clear desc-\u003edev as well.  That prevents, for example,\ni3c_master_unregister_i3c_devs() seeing desc-\u003edev as non-NULL and\ndereferencing it.",
  "id": "CVE-2026-93283",
  "modified": "2026-09-26T03:30:36.620945547Z",
  "published": "2026-09-24T15:52:26.252Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/20a2b6df91fd782ef2ff551febef594d0b46a9a7"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/5bf498623f8397d45f85f14cd631c5e5a565c2fb"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6ecf17bf5fe8da51a6e3fc9e03a76898fcc5c6cf"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/74be657d98a8d684c0475f3cbd450ef2a30ffc73"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7ef12e1dd06e442eebf370f6e53c41bd056d0f22"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7f8e2c4f3704d9774bb26b49b1ad6a60ae57d4a0"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/a14dbdf471001dd0601b0c491184990c178a199c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d22ad96f1a0c89e0ba66a2facc7430f0923919e3"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93283.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93283"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "i3c: master: Fix device_register() error path"
}