A vulnerability in the Linux kernel mailbox controller was addressed by adding a sanity check for the channel array. (CVE-2026-53295)
A vulnerability in the Linux kernel mailbox controller was addressed by adding a sanity check for the channel array. Without this check, if no channel array is attached, a later dereference could cause an OOPS (kernel crash). This issue has been resolved to fail gracefully in such cases.
AI Analysis
Technical Summary
The Linux kernel mailbox subsystem had a vulnerability where the mailbox controller could dereference a null or missing channel array, leading to an OOPS (kernel crash). The fix introduces a sanity check to verify the presence of the channel array before dereferencing it, preventing the kernel from crashing unexpectedly during early initialization of mailbox controllers.
Potential Impact
The vulnerability causes a denial of service condition by crashing the kernel (OOPS) when the mailbox controller attempts to access a non-existent channel array. There is no impact on confidentiality or integrity, only availability is affected.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source code to add the sanity check. Users should apply the updated kernel version containing this fix once it is released. Patch status is not yet confirmed in this data; check the official Linux kernel advisories or vendor updates for the specific patched versions.
A vulnerability in the Linux kernel mailbox controller was addressed by adding a sanity check for the channel array. (CVE-2026-53295)
Description
A vulnerability in the Linux kernel mailbox controller was addressed by adding a sanity check for the channel array. Without this check, if no channel array is attached, a later dereference could cause an OOPS (kernel crash). This issue has been resolved to fail gracefully in such cases.
CVSS v3.1
Score 5.5medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel mailbox subsystem had a vulnerability where the mailbox controller could dereference a null or missing channel array, leading to an OOPS (kernel crash). The fix introduces a sanity check to verify the presence of the channel array before dereferencing it, preventing the kernel from crashing unexpectedly during early initialization of mailbox controllers.
Potential Impact
The vulnerability causes a denial of service condition by crashing the kernel (OOPS) when the mailbox controller attempts to access a non-existent channel array. There is no impact on confidentiality or integrity, only availability is affected.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source code to add the sanity check. Users should apply the updated kernel version containing this fix once it is released. Patch status is not yet confirmed in this data; check the official Linux kernel advisories or vendor updates for the specific patched versions.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-rf57-3w24-v5g9
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53295"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a4e4ed6c9d9e3dbe3288260
Added to database: 07/08/2026, 13:21:26 UTC
Last enriched: 07/08/2026, 13:30:29 UTC
Last updated: 07/31/2026, 19:24:47 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.