{"id":"AZL-102750","summary":"CVE-2026-93052 affecting package kernel 6.6.150.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: bcm-vk: Use acquire/release for msgq_inited\n\nbcm_vk_sync_msgq() fills the message queue information and then sets\nmsgq_inited. Readers call bcm_vk_drv_access_ok() before accessing the\nmessage queues and their cached queue information.\n\natomic_set()/atomic_read() do not order those accesses. A reader can see\nmsgq_inited set while still seeing stale queue information. Use release\nwhen publishing the initialized queues and acquire when checking the gate.\n\nKeep the clear in bcm_vk_blk_drv_access() as atomic_set(). It closes the\ngate and does not publish queue state to readers.","modified":"2026-09-19T05:33:49Z","published":"2026-09-17T17:17:58Z","upstream":["CVE-2026-93052"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93052"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.150.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-102750.json"}}],"schema_version":"1.9.0"}