CVE-2026-53294 - Vulnerability Details

- mailbox: mailbox-test: don't free the reused channel

Description

In the Linux kernel, the following vulnerability has been resolved:

mailbox: mailbox-test: don't free the reused channel

The RX channel can be aliased to the TX channel if it has a different
MMIO. This special case needs to be handled when freeing the channels
otherwise a double-free occurs.

Published: 2026-06-26

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`8ea4484d0c2bb4e2152261943fa1a3522654b1c7`	affected	< fc0089f82c3e36060c2c79156bc2018bfb16b56b
`8ea4484d0c2bb4e2152261943fa1a3522654b1c7`	affected	< 5d4f3d0f64f1016cb78b400a70b67df91fac99b5
`8ea4484d0c2bb4e2152261943fa1a3522654b1c7`	affected	< c494a11da45ad7ec9b0ff216c3e3ace351193bb6
`8ea4484d0c2bb4e2152261943fa1a3522654b1c7`	affected	< 3afca89fae501dbd7421e1777b5b8f033b1d98d0
`8ea4484d0c2bb4e2152261943fa1a3522654b1c7`	affected	< 5c209299b0113e289e238fa5f2e8f00c59f76060
`8ea4484d0c2bb4e2152261943fa1a3522654b1c7`	affected	< 82f6dcea46cf5de65c4ba7283f7c7b34de4a324d
`8ea4484d0c2bb4e2152261943fa1a3522654b1c7`	affected	< 240c71a2aea36a1a4210f911a1c32ea88777e8e4
`8ea4484d0c2bb4e2152261943fa1a3522654b1c7`	affected	< 88ebadbf0deefdaccdab868b44ff70a0a257f473

Linux

affected

Version	Status	Constraints
`4.4`	affected	—
`0`	unaffected	< 4.4
`5.10.258`	unaffected	≤ 5.10.*
`5.15.209`	unaffected	≤ 5.15.*
`6.1.175`	unaffected	≤ 6.1.*
`6.6.141`	unaffected	≤ 6.6.*
`6.12.91`	unaffected	≤ 6.12.*
`6.18.33`	unaffected	≤ 6.18.*
`7.0.10`	unaffected	≤ 7.0.*
`7.1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[8ea4484d0c2bb4e2152261943fa1a3522654b1c7,fc0089f82c3e36060c2c79156bc2018bfb16b56b)`	affected	code_commit	—
`[8ea4484d0c2bb4e2152261943fa1a3522654b1c7,5d4f3d0f64f1016cb78b400a70b67df91fac99b5)`	affected	code_commit	—
`[8ea4484d0c2bb4e2152261943fa1a3522654b1c7,c494a11da45ad7ec9b0ff216c3e3ace351193bb6)`	affected	code_commit	—
`[8ea4484d0c2bb4e2152261943fa1a3522654b1c7,3afca89fae501dbd7421e1777b5b8f033b1d98d0)`	affected	code_commit	—
`[8ea4484d0c2bb4e2152261943fa1a3522654b1c7,5c209299b0113e289e238fa5f2e8f00c59f76060)`	affected	code_commit	—
`[8ea4484d0c2bb4e2152261943fa1a3522654b1c7,82f6dcea46cf5de65c4ba7283f7c7b34de4a324d)`	affected	code_commit	—
`[8ea4484d0c2bb4e2152261943fa1a3522654b1c7,240c71a2aea36a1a4210f911a1c32ea88777e8e4)`	affected	code_commit	—
`[8ea4484d0c2bb4e2152261943fa1a3522654b1c7,88ebadbf0deefdaccdab868b44ff70a0a257f473)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`4.4`	affected	generic	—
`[0,4.4)`	unaffected	generic	—
`[5.10.258,5.11.0)`	unaffected	semver	—
`[5.15.209,5.16.0)`	unaffected	semver	—
`[6.1.175,6.2.0)`	unaffected	semver	—
`[6.6.141,6.7.0)`	unaffected	semver	—
`[6.12.91,6.13.0)`	unaffected	semver	—
`[6.18.33,6.19.0)`	unaffected	semver	—
`[7.0.10,7.1.0)`	unaffected	semver	—
`[7.1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00177.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/240c71a2aea36a1a4210f911a1c32ea88777e8e4
https://git.kernel.org/stable/c/3afca89fae501dbd7421e1777b5b8f033b1d98d0
https://git.kernel.org/stable/c/5c209299b0113e289e238fa5f2e8f00c59f76060
https://git.kernel.org/stable/c/5d4f3d0f64f1016cb78b400a70b67df91fac99b5
https://git.kernel.org/stable/c/82f6dcea46cf5de65c4ba7283f7c7b34de4a324d
https://git.kernel.org/stable/c/88ebadbf0deefdaccdab868b44ff70a0a257f473
https://git.kernel.org/stable/c/c494a11da45ad7ec9b0ff216c3e3ace351193bb6
https://git.kernel.org/stable/c/fc0089f82c3e36060c2c79156bc2018bfb16b56b

History

Fri, 26 Jun 2026 22:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-416

Fri, 26 Jun 2026 20:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: don't free the reused channel The RX channel can be aliased to the TX channel if it has a different MMIO. This special case needs to be handled when freeing the channels otherwise a double-free occurs.
Title		mailbox: mailbox-test: don't free the reused channel
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/240c71a2aea36a1a4210f911a1c32ea88777e8e4 https://git.kernel.org/stable/c/3afca89fae501dbd7421e1777b5b8f033b1d98d0 https://git.kernel.org/stable/c/5c209299b0113e289e238fa5f2e8f00c59f76060 https://git.kernel.org/stable/c/5d4f3d0f64f1016cb78b400a70b67df91fac99b5 https://git.kernel.org/stable/c/82f6dcea46cf5de65c4ba7283f7c7b34de4a324d https://git.kernel.org/stable/c/88ebadbf0deefdaccdab868b44ff70a0a257f473 https://git.kernel.org/stable/c/c494a11da45ad7ec9b0ff216c3e3ace351193bb6 https://git.kernel.org/stable/c/fc0089f82c3e36060c2c79156bc2018bfb16b56b

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-06-26T19:40:52.927Z

Updated: 2026-06-26T19:40:52.927Z

Reserved: 2026-06-09T07:44:35.396Z

Link: CVE-2026-53294

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-06-27T06:15:04Z

Weaknesses

CWE-416

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object