Vulnerability in Linux Kernel Affecting Mailbox Channel Management

CVE-2026-53294

What is CVE-2026-53294?

A vulnerability in the Linux kernel's mailbox management system has been identified, wherein the receive (RX) channel can inadvertently be treated as the transmit (TX) channel. This situation occurs when the two channels have different Memory-Mapped Input/Output (MMIO) configurations. Failing to correctly handle this issue when freeing the channels can result in a double-free condition, which may lead to memory corruption and instability within the system. It is crucial for users and administrators to apply the necessary updates to mitigate the risks associated with this flaw.

References