CVE-2026-53294: mailbox: mailbox-test: don't free the reused channel
In the Linux kernel, the following vulnerability has been resolved:
mailbox: mailbox-test: don't free the reused channel
The RX channel can be aliased to the TX channel if it has a different MMIO. This special case needs to be handled when freeing the channels otherwise a double-free occurs.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In mailbox-test, when the RX channel is aliased to the TX channel, do not free the reused channel; handle this special case during channel cleanup to prevent a double-free.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53294?
CVE-2026-53294 has a risk score of 36.
What does CVE-2026-53294 affect?
CVE-2026-53294 affects the Linux kernel, specifically the mailbox-test functionality.
How can I fix CVE-2026-53294?
To fix CVE-2026-53294, users should update their Linux kernel to the latest patched version.
What type of vulnerability is CVE-2026-53294?
CVE-2026-53294 is a double-free vulnerability related to channel handling in the Linux mailbox subsystem.
When was CVE-2026-53294 published?
CVE-2026-53294 was published on June 26, 2026.