Memory Dereference Vulnerability in Linux Kernel Mailbox Controllers

CVE-2026-53295

What is CVE-2026-53295?

A vulnerability exists in the Linux kernel concerning mailbox controllers. This issue arises when there is an absence of a channel array, which can lead to a failure during operation. If the kernel attempts to dereference a non-existent array, it could cause operational faults (OOPS) that might not be readily observable, particularly if the mailbox is instantiated early in the boot process. The fix introduces a sanity check that prevents operations on an absent channel array, improving system stability.

References