Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array attached to the mailbox controller. Otherwise the later dereference will cause an OOPS which might not be seen because mailbox controllers might instantiate very early. Remove the comment explaining the obvious while here.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 3.18.1, < 5.10.258 |
References
- https://git.kernel.org/stable/c/0f11444271110d9b5bc6316a153c6431abda899cPatch
- https://git.kernel.org/stable/c/14aed0d4e58389cc6a88acf8610b12d3e476272bPatch
- https://git.kernel.org/stable/c/37792091ab28ba030fd8d61184c47d4d51294170Patch
- https://git.kernel.org/stable/c/5cc3300fab262b26c28bc2fc06df693410c3840bPatch
- https://git.kernel.org/stable/c/6362c4a7d7e21e68cd9aa04df7cde16befba3a4bPatch
- https://git.kernel.org/stable/c/9dd7489943324298bb0f385495795a82f1dd6507Patch
- https://git.kernel.org/stable/c/c1aad75595fb67edc7fda8af249d3b886efa1be9Patch
- https://git.kernel.org/stable/c/d44872a569b8fbacde457ff2587a775e5004bb79Patch
FAQ
What is CVE-2026-53295?
CVE-2026-53295 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array attached to the mailbox controller. Other...
How severe is CVE-2026-53295?
CVE-2026-53295 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-53295?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.