In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Use devm_pm_runtime_enable() sashiko complained about early usage… (CVE-2026-98904)

The Linux kernel imx mailbox driver had a vulnerability related to early usage of the device during probe, causing potential issues in device removal and shutdown sequencing. The resolution involved using devm_pm_runtime_enable() later in the device lifecycle, removing manual pm_runtime_disable() calls, and reordering devm_mbox_controller_register() to occur after pm-runtime handling. This ensures that in error cases, the device is properly removed and shutdown before disabling runtime power management, preventing manual intervention.

The vulnerability could cause improper device removal and shutdown sequencing in the imx mailbox driver, potentially leading to resource leaks or unstable device states during error conditions. No specific exploitation or broader system impact details are provided.

An official fix is available that reorders power management runtime enablement and device registration calls in the imx mailbox driver. Users should apply the updated Linux kernel version containing this fix. No additional manual mitigation is indicated.