VYPR
High severity7.8NVD Advisory· Published Jun 26, 2026· Updated Jul 8, 2026

CVE-2026-53296

CVE-2026-53296

Description

In the Linux kernel, the following vulnerability has been resolved:

mailbox: mailbox-test: free channels on probe error

On probe error, free the previously obtained channels. This not only prevents a leak, but also UAF scenarios because the client structure will be removed nonetheless because it was allocated with devm.

Affected products

4
  • Linux/Kernelllm-fuzzy3 versions
    (expand)+ 2 more
    • (no CPE)
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.4,<5.10.258
    • cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
  • osv-coords
    Range: >= 4.4.0, < 5.10.258

Patches

Vulnerability mechanics

References

8

News mentions

1