---
id: CVE-2026-53296
title: 'mailbox: mailbox-test: free channels on probe error'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mailbox: mailbox-test: free channels on probe error

  On probe error, free the previously obtained channels. This not only
  prevents a leak, but also UAF scenarios becaus…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 <
    0ad8c4a03a358de7811ba1ab8cbd1fe76ad0ff6b
  - >-
    Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 <
    15c4cc3850cfe1b973eb7b63c02314b267f06a64
  - >-
    Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 <
    187069ccc3474516af32350e20d7e449160fa6de
  - >-
    Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 <
    81c9e7e4030e71391ab479c4c6e17b64802577aa
  - >-
    Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 <
    6c6ce2ccb4fcf1617fec83f91b21aa0265f30701
  - >-
    Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 <
    742001919653e7313b4e91780c5d108be1692365
  - >-
    Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 <
    02beb178e2e159daeb8f992d7abb16a37da31664
  - >-
    Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 <
    c02053a9055d5fdfd32432287cca8958db1d5bc5
  - Linux 4.4
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:25:57.496250Z'
published: '2026-06-26'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:34:19.157Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-53296'
references:
  - url: 'https://git.kernel.org/stable/c/0ad8c4a03a358de7811ba1ab8cbd1fe76ad0ff6b'
  - url: 'https://git.kernel.org/stable/c/15c4cc3850cfe1b973eb7b63c02314b267f06a64'
  - url: 'https://git.kernel.org/stable/c/187069ccc3474516af32350e20d7e449160fa6de'
  - url: 'https://git.kernel.org/stable/c/81c9e7e4030e71391ab479c4c6e17b64802577aa'
  - url: 'https://git.kernel.org/stable/c/6c6ce2ccb4fcf1617fec83f91b21aa0265f30701'
  - url: 'https://git.kernel.org/stable/c/742001919653e7313b4e91780c5d108be1692365'
  - url: 'https://git.kernel.org/stable/c/02beb178e2e159daeb8f992d7abb16a37da31664'
  - url: 'https://git.kernel.org/stable/c/c02053a9055d5fdfd32432287cca8958db1d5bc5'
tags:
  - cve.org
epss: 0.00176
epssPercentile: 0.07124
ingestedAt: '2026-11-06T16:57:43.252Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mailbox: mailbox-test: free channels on probe error

On probe error, free the previously obtained channels. This not only
prevents a leak, but also UAF scenarios because the client structure
will be removed nonetheless because it was allocated with devm.

## Affected

- `Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 0ad8c4a03a358de7811ba1ab8cbd1fe76ad0ff6b`
- `Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 15c4cc3850cfe1b973eb7b63c02314b267f06a64`
- `Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 187069ccc3474516af32350e20d7e449160fa6de`
- `Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 81c9e7e4030e71391ab479c4c6e17b64802577aa`
- `Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 6c6ce2ccb4fcf1617fec83f91b21aa0265f30701`
- `Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 742001919653e7313b4e91780c5d108be1692365`
- `Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < 02beb178e2e159daeb8f992d7abb16a37da31664`
- `Linux >= 8ea4484d0c2bb4e2152261943fa1a3522654b1c7 < c02053a9055d5fdfd32432287cca8958db1d5bc5`
- `Linux 4.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.