{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-93052",
  "modified": "2026-10-07T17:22:01Z",
  "upstream": [
    "CVE-2026-93052"
  ],
  "published": "2026-09-17T16:10:40Z",
  "summary": "misc: bcm-vk: Use acquire/release for msgq_inited",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: bcm-vk: Use acquire/release for msgq_inited\n\nbcm_vk_sync_msgq() fills the message queue information and then sets\nmsgq_inited. Readers call bcm_vk_drv_access_ok() before accessing the\nmessage queues and their cached queue information.\n\natomic_set()/atomic_read() do not order those accesses. A reader can see\nmsgq_inited set while still seeing stale queue information. Use release\nwhen publishing the initialized queues and acquire when checking the gate.\n\nKeep the clear in bcm_vk_blk_drv_access() as atomic_set(). It closes the\ngate and does not publish queue state to readers.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:12",
        "name": "linux"
      },
      "versions": [
        "1:6.1.47-1+rpt4"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-2712",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v6",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7l",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v8",
            "binary_version": "1:6.1.47-1+rpt4"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.1.47-1+rpt4": {
            "linux_commit": "655fc658a15ae7a6f37103754adb39ba52a9a14e",
            "upstream_version": "6.1.47",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.1.188",
            "compiled_filter": false
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93052"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/bab66a9e30e39a06f3463b19f8c704386dfd5268"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/679cfada6868723ccf162ec3b78c7402ff2405bf"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/f7a8f4cbc8cede0be55220367dc52b126e2d39e5"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/1df3926ed8771edf286ff753428b243f334e6041"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/a45d6dd3c11e921882a2e74c7c8710b975f2eaa7"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/4984277bc43f84d7506346a09b29af138246d54a"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/61b101c6a150057b6d512421ed108aed16e822ea"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-09-17T16:10:40Z"
  }
}