CVE-2026-53294

HighCVSS 7.8/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mailbox: mailbox-test: don't free the reused channel

The RX channel can be aliased to the TX channel if it has a different MMIO. This special case needs to be handled when freeing the channels otherwise a double-free occurs.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

VendorProductVersions
LinuxLinux>= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7, < fc0089f82c3e36060c2c79156bc2018bfb16b56b; >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7, < 5d4f3d0f64f1016cb78b400a70b67df91fac99b5; >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7, < c494a11da45ad7ec9b0ff216c3e3ace351193bb6; >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7, < 3afca89fae501dbd7421e1777b5b8f033b1d98d0; >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7, < 5c209299b0113e289e238fa5f2e8f00c59f76060; >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7, < 82f6dcea46cf5de65c4ba7283f7c7b34de4a324d; >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7, < 240c71a2aea36a1a4210f911a1c32ea88777e8e4; >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7, < 88ebadbf0deefdaccdab868b44ff70a0a257f473
LinuxLinux4.4

References

Timeline

Published
Jun 26, 2026
Last modified
Nov 6, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-532955.5In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there iCVE-2026-532967.8In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: free channels on probe error On probe error, frCVE-2026-532975.5In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against double invocation If PM resume faCVE-2026-532985.5In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_quCVE-2026-532995.5In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() CVE-2026-53306.5A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by this issue is some unknown functionalitCVE-2026-533007.8In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue The AI-generated review CVE-2026-533015.5In the Linux kernel, the following vulnerability has been resolved: reset: amlogic: t7: Fix null reset ops Fix missing reset ops causing kCVE-2026-533025.5In the Linux kernel, the following vulnerability has been resolved: crypto: eip93 - fix hmac setkey algo selection eip93_hmac_setkey() allCVE-2026-533037.1In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() ICVE-2026-533045.5In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /dev/sgX The parameteCVE-2026-533055.5In the Linux kernel, the following vulnerability has been resolved: usb: typec: ps883x: Fix Oops at unbind When trying to unbind a device
CVE-2026-53294: High severity, CVSS 7.8 | Vulnix