The Linux kernel’s imx mailbox driver contains a race condition (CWE-366) between a channel shutdown routine and its interrupt service routine. If an interrupt occurs while a channel is being shut down, the receive event may remain enabled, allowing the interrupt core to shut down a channel that has already been requested for removal. This flaw can produce a "nobody cared" error and, in rare corner cases, trigger a kernel panic, leading to local denial of service without providing remote code execution. The vulnerability hinges on precise timing and proper synchronization, making it a low‑severity concurrency bug.

This defect exists in any Linux kernel build that includes the imx mailbox subsystem, which is used on i.MX System‑on‑Chip platforms such as the i.MX6, i.MX7, and i.MX8 families. Because the CVE documentation does not specify a version range, all kernel releases prior to the upstream fix that ship the vulnerable driver code are potentially affected. No vendor‑specific restricted product lists are provided.

The CVSS score of 4.1 indicates low severity. The EPSS score is less than 1 %, indicating a very low probability of exploitation. The vulnerability is not listed in the CISA KEV database, meaning there are no known exploit campaigns. The race requires careful timing and control of interrupts, so it is unlikely to be exploitable from user space without root privileges. Nevertheless, the effect can lead to kernel instability, so patching is recommended.