CVE-2026-53295

MediumCVSS 5.5/10Last modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mailbox: add sanity check for channel array

Fail gracefully if there is no channel array attached to the mailbox controller. Otherwise the later dereference will cause an OOPS which might not be seen because mailbox controllers might instantiate very early. Remove the comment explaining the obvious while here.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 2b6d83e2b8b7de82331a6a1dcd64b51020a6031c, < 5cc3300fab262b26c28bc2fc06df693410c3840b; >= 2b6d83e2b8b7de82331a6a1dcd64b51020a6031c, < 0f11444271110d9b5bc6316a153c6431abda899c; >= 2b6d83e2b8b7de82331a6a1dcd64b51020a6031c, < d44872a569b8fbacde457ff2587a775e5004bb79; >= 2b6d83e2b8b7de82331a6a1dcd64b51020a6031c, < 14aed0d4e58389cc6a88acf8610b12d3e476272b; >= 2b6d83e2b8b7de82331a6a1dcd64b51020a6031c, < 6362c4a7d7e21e68cd9aa04df7cde16befba3a4b; >= 2b6d83e2b8b7de82331a6a1dcd64b51020a6031c, < 9dd7489943324298bb0f385495795a82f1dd6507; >= 2b6d83e2b8b7de82331a6a1dcd64b51020a6031c, < 37792091ab28ba030fd8d61184c47d4d51294170; >= 2b6d83e2b8b7de82331a6a1dcd64b51020a6031c, < c1aad75595fb67edc7fda8af249d3b886efa1be9
LinuxLinux3.18
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.7, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.7, < *

References

Timeline

Published
Jun 26, 2026
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-532967.8In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: free channels on probe error On probe error, frCVE-2026-532975.5In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against double invocation If PM resume faCVE-2026-532985.5In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_quCVE-2026-532995.5In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() CVE-2026-53306.5A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by this issue is some unknown functionalitCVE-2026-533007.8In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue The AI-generated review CVE-2026-533015.5In the Linux kernel, the following vulnerability has been resolved: reset: amlogic: t7: Fix null reset ops Fix missing reset ops causing kCVE-2026-533025.5In the Linux kernel, the following vulnerability has been resolved: crypto: eip93 - fix hmac setkey algo selection eip93_hmac_setkey() allCVE-2026-533037.1In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() ICVE-2026-533045.5In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /dev/sgX The parameteCVE-2026-533055.5In the Linux kernel, the following vulnerability has been resolved: usb: typec: ps883x: Fix Oops at unbind When trying to unbind a device CVE-2026-533065.5In the Linux kernel, the following vulnerability has been resolved: tty: hvc_iucv: fix off-by-one in number of supported devices MAX_HVC_I
CVE-2026-53295: Medium severity, CVSS 5.5 | Vulnix