# rpmsg: glink: fix deadlock in endpoint destroy during driver detach

CVE record · `CVE-2026-93098`

- **Identifiers:** `CVE-2026-93098`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 17 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:11 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `93b6b9e4acff4794e7426d3ad64ef14e3b3e8919 to before 73092c2292aa65515671e54abbcda2166d3827ed` (git)
  - affected: `24fd02c3a4798de7dc94b55d36a1685fe6cdaf69 to before bbc236357876d35a624030e5c50eedbc380be98e` (git)
  - affected: `32fe8cdf541863239b81c80b8b04112d6e8792cf to before 8597f669a5268e0dcf243e2b2d6ca00370117057` (git)
  - affected: `c6210714347f72bae8e7142dc0a7f99923c466e7 to before 48f55b90f0d713e477e26b85d7327d9592d016f9` (git)
  - affected: `fcab5c2672f8dac3d77013dbe047b2441f4141f5 to before cbcdf96e1c87bc07055d04264018ded1f3bafffb` (git)
  - affected: `f80e4e91b010ee7d6c52f24d069975ac955ac6b2 to before ecad679e2b92c419cc22cc8f257cd457d5192647` (git)
  - affected: `a53e356df548f6b0e82529ef3cc6070f42622189 to before e559626bee8a6632aafc08eedcdb4bf26ca245c5` (git)
  - affected: `a53e356df548f6b0e82529ef3cc6070f42622189 to before 5a5a48e788e02fd8a8eb7188ce440572d6c12418` (git)
  - affected: `5.10.248 to before 5.10.270` (semver)
  - affected: `5.15.198 to before 5.15.221` (semver)
  - affected: `6.1.160 to before 6.1.188` (semver)
  - affected: `6.6.120 to before 6.6.157` (semver)
  - and 2 more
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `6.19`
  - unaffected: `before 6.19` (semver)
  - unaffected: `5.10.270 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.221 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.188 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.110 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.52 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.6 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0022, the 12th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-93098](https://www.cve.org/CVERecord?id=CVE-2026-93098)
- [NVD: CVE-2026-93098](https://nvd.nist.gov/vuln/detail/CVE-2026-93098)

### References from the CNA

- <https://git.kernel.org/stable/c/73092c2292aa65515671e54abbcda2166d3827ed>
- <https://git.kernel.org/stable/c/bbc236357876d35a624030e5c50eedbc380be98e>
- <https://git.kernel.org/stable/c/8597f669a5268e0dcf243e2b2d6ca00370117057>
- <https://git.kernel.org/stable/c/48f55b90f0d713e477e26b85d7327d9592d016f9>
- <https://git.kernel.org/stable/c/cbcdf96e1c87bc07055d04264018ded1f3bafffb>
- <https://git.kernel.org/stable/c/ecad679e2b92c419cc22cc8f257cd457d5192647>
- <https://git.kernel.org/stable/c/e559626bee8a6632aafc08eedcdb4bf26ca245c5>
- <https://git.kernel.org/stable/c/5a5a48e788e02fd8a8eb7188ce440572d6c12418>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-93098>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-93098/>. Everything for agents: <https://agentprime.io/llms.txt>.