CVE-2026-53294

A flaw was found in the Linux kernel's mailbox subsystem. This vulnerability occurs when the receive (RX) channel is aliased to the transmit (TX) channel with a different Memory-Mapped I/O (MMIO) and is not properly handled during the freeing of channels. This can lead to a double-free condition, which may result in memory corruption and potentially a denial of service.

This vulnerability is rated as Moderate impact because triggering the flaw requires local access and specific configuration of mailbox channels, restricting the primary impact to a denial of service via kernel crash or memory corruption rather than arbitrary remote code execution. The issue resides within the mailbox-test driver, a diagnostic facility intended for testing that is not utilized during regular system operations. Consequently, systems running default production configurations face minimal operational exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.