CVE-2026-53296
Received Received - Intake
Memory Leak in Linux Kernel Mailbox Test Driver

Publication date: 2026-06-26

Last updated on: 2026-06-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: free channels on probe error On probe error, free the previously obtained channels. This not only prevents a leak, but also UAF scenarios because the client structure will be removed nonetheless because it was allocated with devm.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-26
Last Modified
2026-06-26
Generated
2026-06-27
AI Q&A
2026-06-26
EPSS Evaluated
N/A
NVD
CVE-2026-53296
EUVD
EUVD-2026-39901
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's mailbox subsystem, specifically in the mailbox-test component. It occurs when there is a probe error during initialization. The issue is that previously obtained channels were not freed properly on a probe error, which could lead to resource leaks and use-after-free (UAF) scenarios. The fix ensures that on a probe error, all previously allocated channels are freed, preventing these problems.

Impact Analysis

If this vulnerability is present, it can cause resource leaks and use-after-free conditions in the Linux kernel's mailbox subsystem. This can lead to system instability, crashes, or potentially exploitable conditions that might allow an attacker to execute arbitrary code or cause denial of service.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53296. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart