Description
In the Linux kernel, the following vulnerability has been resolved:

mailbox: imx: Use devm_pm_runtime_enable()

sashiko complained about early usage of the device while probe isn't
completed. This can be mitigated by delaying the pm_runtime_enable()
into the removal path instead doing it early. This ensures that in an
error case the device is removed (and imx_mu_shutdown()) before
pm_runtime_disable() so we don't have to do this manually.

For the order to work, lets move devm_mbox_controller_register() until
after the pm-runtime part. So the reverse order will be mbox-controller
removal followed by disabling pm runtime.

Use devm_pm_runtime_enable(), remove manual pm_runtime_disable()
invocations and move the pm_runtime handling in probe before
devm_mbox_controller_register().
Published: 2026-10-23
Score: n/a
EPSS: n/a
KEV: No
Impact: Kernel Instability or Denial of Service
Action: Apply Patch
AI Analysis

Impact

During the initialization of the mailbox driver for i.MX processors, the function devm_pm_runtime_enable() was called before the probe had finished. This early power‑management enablement allowed the device to be accessed prior to full initialization, potentially leading to incorrect power state handling, kernel instability, or a denial of service if the driver attempted to use an unprepared hardware controller.

Affected Systems

All Linux kernel builds that include the mailbox driver for i.MX processors are affected, as the issue is in the kernel source itself. The exact version range is not specified in the data provided, so any kernel version that contains the unpatched mailbox implementation is potentially impacted.

Risk and Exploitability

No CVSS score or EPSS data is available, and the vulnerability is not listed in the CISA KEV catalog, meaning no publicly known exploits currently exist. The attack vector would require an attacker to trigger the probe sequence while the device is not yet fully initialized, which could be achieved by sending malformed mailbox commands or manipulating the driver’s initialization path. While the impact could be local kernel instability or denial of service, there is currently no evidence of exploitation in the wild.

Generated by OpenCVE AI on October 23, 2026 at 14:46 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the kernel patch that moves devm_pm_runtime_enable to after devm_mbox_controller_register
  • Ensure that the mailbox driver for i.MX processors is built into the kernel configuration and that the patched source is used
  • Verify that the runtime power management is not enabled during probe by checking driver logs and kernel activity

Generated by OpenCVE AI on October 23, 2026 at 14:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux linux
Vendors & Products Linux linux

Fri, 23 Oct 2026 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Use devm_pm_runtime_enable() sashiko complained about early usage of the device while probe isn't completed. This can be mitigated by delaying the pm_runtime_enable() into the removal path instead doing it early. This ensures that in an error case the device is removed (and imx_mu_shutdown()) before pm_runtime_disable() so we don't have to do this manually. For the order to work, lets move devm_mbox_controller_register() until after the pm-runtime part. So the reverse order will be mbox-controller removal followed by disabling pm runtime. Use devm_pm_runtime_enable(), remove manual pm_runtime_disable() invocations and move the pm_runtime handling in probe before devm_mbox_controller_register().
Title mailbox: imx: Use devm_pm_runtime_enable()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-23T11:54:16.943Z

Reserved: 2026-09-25T10:25:14.379Z

Link: CVE-2026-98904

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-23T12:18:24.477

Modified: 2026-10-23T12:18:24.477

Link: CVE-2026-98904

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T15:00:13Z

Weaknesses

No weakness.