CVE-2026-93200 i3c: master: Fix use-after-free of master->this
A use-after-free in the Linux kernel I3C master driver allows local attackers to execute arbitrary code or escalate privileges via sysfs access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-93200?
CVE-2026-93200 is an use after free vulnerability in Linux, published on 17 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
i3c: master: Fix use-after-free of master->this
sysfs attribute callbacks for the master controller device dereference master->this. However, master->this is freed in i3c_master_detach_free_devs() before the master device itself is released.
As a result, sysfs accesses can dereference a freed master->this pointer, leading to a use-after-free.
Keep master->this alive until i3c_masterdev_release(), which is called after the master device and its sysfs state are being torn down. Do not free master->this as part of the normal device detach path.
On the error path in i3c_master_set_info(), reset master->this and bus.cur_master to NULL before freeing the allocated device.
Which versions are affected by CVE-2026-93200?
How do I fix CVE-2026-93200?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-93200 being exploited?
There is no known exploitation of CVE-2026-93200 in the wild and no public exploit code.
Sources
Also known as AZL-102198, BELL-CVE-2026-93200, DEBIAN-CVE-2026-93200, GHSA-353r-jvg2-63v3, UBUNTU-CVE-2026-93200.