CVE-2026-53296

mailbox: mailbox-test: free channels on probe error

State: Published
Severity: Not scored
Published: Jun 26, 2026
Updated: Jun 26, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mailbox: mailbox-test: free channels on probe error

On probe error, free the previously obtained channels. This not only prevents a leak, but also UAF scenarios because the client structure will be removed nonetheless because it was allocated with devm.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 0ad8c4a03a358de7811ba1ab8cbd1fe76ad0ff6bAffected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 15c4cc3850cfe1b973eb7b63c02314b267f06a64Affected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 187069ccc3474516af32350e20d7e449160fa6deAffected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 81c9e7e4030e71391ab479c4c6e17b64802577aaAffected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 6c6ce2ccb4fcf1617fec83f91b21aa0265f30701Affected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 742001919653e7313b4e91780c5d108be1692365Affected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 02beb178e2e159daeb8f992d7abb16a37da31664Affected 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before c02053a9055d5fdfd32432287cca8958db1d5bc5Affected
LinuxLinux	4.4Affected before 4.4Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 0ad8c4a03a358de7811ba1ab8cbd1fe76ad0ff6bAffected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 15c4cc3850cfe1b973eb7b63c02314b267f06a64Affected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 187069ccc3474516af32350e20d7e449160fa6deAffected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 81c9e7e4030e71391ab479c4c6e17b64802577aaAffected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 6c6ce2ccb4fcf1617fec83f91b21aa0265f30701Affected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 742001919653e7313b4e91780c5d108be1692365Affected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before 02beb178e2e159daeb8f992d7abb16a37da31664Affected
8ea4484d0c2bb4e2152261943fa1a3522654b1c7 to before c02053a9055d5fdfd32432287cca8958db1d5bc5Affected

LinuxLinux

4.4Affected
before 4.4Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.