CVE-2026-53296

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-06-26 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: free channels on probe error On probe error, free the previously obtained channels. This not only prevents a leak, but also UAF scenarios because the client structure will be removed nonetheless because it was allocated with devm.

Weakness Classification (1)

Affected Software (11)

VendorProductVersion
Linux Linux 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 0ad8c4a03a358de7811ba1ab8cbd1fe76ad0ff6b
Linux Linux 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 15c4cc3850cfe1b973eb7b63c02314b267f06a64
Linux Linux 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 187069ccc3474516af32350e20d7e449160fa6de
Linux Linux 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 81c9e7e4030e71391ab479c4c6e17b64802577aa
Linux Linux 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 6c6ce2ccb4fcf1617fec83f91b21aa0265f30701
Linux Linux 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 742001919653e7313b4e91780c5d108be1692365
Linux Linux 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 02beb178e2e159daeb8f992d7abb16a37da31664
Linux Linux 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < c02053a9055d5fdfd32432287cca8958db1d5bc5
Linux Linux 4.4
linux linux_kernel 4.4 – 5.10.258
linux linux_kernel 7.1

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.18%
Raw Score 0.001760
Percentile 7.1%
Date 2026-11-06

Intelligence Sources

mitre ref →
nvd ref →