CVE-2026-98903: Linux kernel · mailbox: imx: Add a channel shutdown field
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in 02273054b2e94e53065ea5644265bb9d8f7ee2a7 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 14:18 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 02273054b2e94e53065ea5644265bb9d8f7ee2a7, 944d8509c2220a2313d4a094a646507929fb6f8d, 5ccea7eacb7786c358833634f45700365f6c1d99
Exploitation evidence
Disclosed: evidence found.
CVE published 23 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 02273054b2e94e53065ea5644265bb9d8f7ee2a7, 944d8509c2220a2313d4a094a646507929fb6f8d or 5ccea7eacb7786c358833634f45700365f6c1d99.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available and has been applied in the Linux kernel. Users should update to the fixed versions identified by the commits 02273054b2e94e53065ea5644265bb9d8f7ee2a7, 944d8509c2220a2313d4a094a646507929fb6f8d, and 5ccea7eacb7786c358833634f45700365f6c1d99. No additional mitigation is required beyond applying these updates.
Description
A race condition vulnerability in the Linux kernel's imx mailbox driver was addressed by adding a channel shutdown field. The issue involved a timing window where the RX event could be re-enabled by an interrupt service routine while the shutdown process was waiting on free_irq(), potentially causing problematic interrupt handling and a 'nobody cared' message from the irq-core. The fix introduces a shutdown flag to properly serialize event enabling and prevent interrupts from being re-enabled during shutdown.