CVE-2026-93199i3c: master: Do not treat master device as a duplicate target
- —Not scoredno CVSS score yet
- 0.20%Exploitation in 30 daysEPSS · top 90% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3c_master_search_i3c_dev_duplicate() searches the bus for another I3C device with the same PID as the reference device. The search can match master->this, causing the controller itself to be returned as a duplicate. Since the controller is not a target device, it cannot be a duplicate of one. Exclude master->this from matching so that the function only returns real duplicate target devices.
Timeline
ID reserved
By Linux
Published
- 43 days later
· 43 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.20% · top 90% of all CVEs (15 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 – < 3728d90ec66d4ad33d357e7d6e82b02d34e1c99c
- affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 – < 6f2340857fc206e7ebfc50c568fb65c3055e568b
- affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 – < d72a5e9060030a1c205b54157c15a428b741d83f
- affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 – < 7b25b755d59077dd9484ba1360b8fe6396e5ccfb
- affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 – < 533faf3d2e67ded0a62b7ba753c0fe993d1dfc26
- affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 – < d0cc00957292e353ad46039034cd8f82fc4f8057
- affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 – < 150e71808d3715a0deefbb189c780d03fdbdc735
- affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 – < 4dc1b3eeba7991905a5b5b8129ebea51be7d87b7
- affected 5.0
- unaffected < 5.0
- unaffected 5.10.273 – ≤ 5.10.*
- unaffected 5.15.224 – ≤ 5.15.*
- unaffected 6.1.191 – ≤ 6.1.*
- unaffected 6.6.160 – ≤ 6.6.*
- unaffected 6.12.112 – ≤ 6.12.*
- unaffected 6.18.52 – ≤ 6.18.*
- unaffected 7.2.6 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References8
- https://git.kernel.org/stable/c/3728d90ec66d4ad33d357e7d6e82b02d34e1c99c (opens in a new tab)
- https://git.kernel.org/stable/c/6f2340857fc206e7ebfc50c568fb65c3055e568b (opens in a new tab)
- https://git.kernel.org/stable/c/d72a5e9060030a1c205b54157c15a428b741d83f (opens in a new tab)
- https://git.kernel.org/stable/c/7b25b755d59077dd9484ba1360b8fe6396e5ccfb (opens in a new tab)
- https://git.kernel.org/stable/c/533faf3d2e67ded0a62b7ba753c0fe993d1dfc26 (opens in a new tab)
- https://git.kernel.org/stable/c/d0cc00957292e353ad46039034cd8f82fc4f8057 (opens in a new tab)
- https://git.kernel.org/stable/c/150e71808d3715a0deefbb189c780d03fdbdc735 (opens in a new tab)
- https://git.kernel.org/stable/c/4dc1b3eeba7991905a5b5b8129ebea51be7d87b7 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-82307 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-93199)Record last updated .