Description
In the Linux kernel, the following vulnerability has been resolved:

mailbox: add sanity check for channel array

Fail gracefully if there is no channel array attached to the mailbox
controller. Otherwise the later dereference will cause an OOPS which
might not be seen because mailbox controllers might instantiate very
early. Remove the comment explaining the obvious while here.
Published: 2026-06-26
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A missing channel array in a mailbox controller can lead to an OOPS when the kernel attempts to dereference a null pointer. This failure results in a kernel crash, causing system downtime. The vulnerability does not directly expose data, but it can be used by an attacker to destabilize the system and create a denial of service condition.

Affected Systems

All Linux kernel releases that contain the mailbox driver without the sanity check are potentially affected. The exact kernel versions are not listed in the data, but the issue is mitigated in the latest branches that include the commit adding the check.

Risk and Exploitability

No CVSS score is provided and the EPSS value is unavailable. The vulnerability is not listed in the CISA KEV catalog. Given that a kernel crash can lead to a denial of service and the attack requires code execution within the kernel, the risk remains high until a patch is applied.

Generated by OpenCVE AI on June 26, 2026 at 22:17 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Linux kernel to the latest stable release that incorporates the mailbox sanity check commit.
  • If a kernel upgrade is not immediately possible, avoid using or loading mailbox controllers which might instantiate early during boot.
  • Monitor system logs for OOPS messages that could indicate the presence of the flaw and consider disabling the affected driver modules.

Generated by OpenCVE AI on June 26, 2026 at 22:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 26 Jun 2026 22:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Fri, 26 Jun 2026 20:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array attached to the mailbox controller. Otherwise the later dereference will cause an OOPS which might not be seen because mailbox controllers might instantiate very early. Remove the comment explaining the obvious while here.
Title mailbox: add sanity check for channel array
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-26T19:40:53.670Z

Reserved: 2026-06-09T07:44:35.396Z

Link: CVE-2026-53295

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-26T22:30:04Z

Weaknesses