CVE-2026-93199

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3c_master_search_i3c_dev_duplicate() searches the bus for another I3C device with the same PID as the reference device. The search can match master->this, causing the controller itself to be returned as a duplicate. Since the controller is not a target device, it cannot be a duplicate of one. Exclude master->this from matching so that the function only returns real duplicate target devices.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-25)

Published

2026-09-17

Modified

2026-10-21

Record from

the NVD, synced 2026-10-22

References

• https://git.kernel.org/stable/c/150e71808d3715a0deefbb189c780d03fdbdc735
• https://git.kernel.org/stable/c/4dc1b3eeba7991905a5b5b8129ebea51be7d87b7
• https://git.kernel.org/stable/c/533faf3d2e67ded0a62b7ba753c0fe993d1dfc26
• https://git.kernel.org/stable/c/7b25b755d59077dd9484ba1360b8fe6396e5ccfb
• https://git.kernel.org/stable/c/d0cc00957292e353ad46039034cd8f82fc4f8057

Check your stackJSON