CVE-2026-53295

In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array attached to the mailbox controller. Otherwise the later dereference will cause an OOPS which might not be seen because mailbox controllers might instantiate very early. Remove the comment explaining the obvious while here.

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-25)

Published

2026-06-26

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/0f11444271110d9b5bc6316a153c6431abda899c
• https://git.kernel.org/stable/c/14aed0d4e58389cc6a88acf8610b12d3e476272b
• https://git.kernel.org/stable/c/37792091ab28ba030fd8d61184c47d4d51294170
• https://git.kernel.org/stable/c/5cc3300fab262b26c28bc2fc06df693410c3840b
• https://git.kernel.org/stable/c/6362c4a7d7e21e68cd9aa04df7cde16befba3a4b

Check your stackJSON