CVE-2026-53294

mailbox: mailbox-test: don't free the reused channel

State: Published
Severity: Not scored
Published: Jun 26, 2026
Updated: Jun 26, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mailbox: mailbox-test: don't free the reused channel

The RX channel can be aliased to the TX channel if it has a different MMIO. This special case needs to be handled when freeing the channels otherwise a double-free occurs.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before fc0089f82c3e36060c2c79156bc2018bfb16b56bAffected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 5d4f3d0f64f1016cb78b400a70b67df91fac99b5Affected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before c494a11da45ad7ec9b0ff216c3e3ace351193bb6Affected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 3afca89fae501dbd7421e1777b5b8f033b1d98d0Affected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 5c209299b0113e289e238fa5f2e8f00c59f76060Affected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 82f6dcea46cf5de65c4ba7283f7c7b34de4a324dAffected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 240c71a2aea36a1a4210f911a1c32ea88777e8e4Affected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 88ebadbf0deefdaccdab868b44ff70a0a257f473Affected
LinuxLinux	4.4Affected before 4.4Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before fc0089f82c3e36060c2c79156bc2018bfb16b56bAffected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 5d4f3d0f64f1016cb78b400a70b67df91fac99b5Affected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before c494a11da45ad7ec9b0ff216c3e3ace351193bb6Affected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 3afca89fae501dbd7421e1777b5b8f033b1d98d0Affected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 5c209299b0113e289e238fa5f2e8f00c59f76060Affected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 82f6dcea46cf5de65c4ba7283f7c7b34de4a324dAffected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 240c71a2aea36a1a4210f911a1c32ea88777e8e4Affected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 88ebadbf0deefdaccdab868b44ff70a0a257f473Affected

LinuxLinux

4.4Affected
before 4.4Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.