CVE-2026-93199 i3c: master: Do not treat master device as a duplicate target
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-93199?
CVE-2026-93199 is a vulnerability in Linux, published on 17 Sep 2026.
Official description
In the Linux kernel, the following vulnerability has been resolved:
i3c: master: Do not treat master device as a duplicate target
i3c_master_search_i3c_dev_duplicate() searches the bus for another I3C device with the same PID as the reference device. The search can match master->this, causing the controller itself to be returned as a duplicate.
Since the controller is not a target device, it cannot be a duplicate of one. Exclude master->this from matching so that the function only returns real duplicate target devices.
Which versions are affected by CVE-2026-93199?
How do I fix CVE-2026-93199?
Upgrade to a fixed version.
Is CVE-2026-93199 being exploited?
There is no known exploitation of CVE-2026-93199 in the wild and no public exploit code.
Sources
Also known as AZL-102401, BELL-CVE-2026-93199, DEBIAN-CVE-2026-93199, GHSA-c82m-2rvg-fqpm, UBUNTU-CVE-2026-93199.