CVE-2026-93199 is a vulnerability in Linux Kernel
Published on September 17, 2026
i3c: master: Do not treat master device as a duplicate target
In the Linux kernel, the following vulnerability has been resolved:
i3c: master: Do not treat master device as a duplicate target
i3c_master_search_i3c_dev_duplicate() searches the bus for another I3C
device with the same PID as the reference device. The search can match
master->this, causing the controller itself to be returned as a
duplicate.
Since the controller is not a target device, it cannot be a duplicate of
one. Exclude master->this from matching so that the function only
returns real duplicate target devices.
Products Associated with CVE-2026-93199
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 and below d0cc00957292e353ad46039034cd8f82fc4f8057 is affected.
- Version 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 and below 150e71808d3715a0deefbb189c780d03fdbdc735 is affected.
- Version 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 and below 4dc1b3eeba7991905a5b5b8129ebea51be7d87b7 is affected.
- Version 5.0 is affected.
- Before 5.0 is unaffected.
- Version 6.18.52, <= 6.18.* is unaffected.
- Version 7.2.6, <= 7.2.* is unaffected.
- Version 7.3-rc1, <= * is unaffected.