32 matches found
CVE-2026-93186
A flaw was found in the Linux kernel's Compute Express Link CXL mailbox driver. A local attacker could exploit an unbounded memory allocation vulnerability in the CXLMEMSENDCOMMAND function. By providing a large output size, an attacker could trigger a huge memory allocation, potentially leading ...
CVE-2026-90192
A flaw was found in the Linux kernel's qcom-cpucp mailbox driver. The qcomcpucpmboxsenddata function, responsible for sending data, did not properly handle a NULL data pointer when mailboxclearchannel attempted to notify the remote side that the receive RX channel was cleared. This blind...
ROS-20261009-73-0351
The vulnerability of the mboxcontrollerregister function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260922-73-0071
The vulnerability of the mboxtestprobe function in the drivers/mailbox/mailbox-test.c file of the Linux kernel’s mailbox driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
SUSE CVE-2026-80822
In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...
AZL-99686 CVE-2026-80822 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...
CVE-2026-80822
In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...
CVE-2026-80822
In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...
CVE-2026-80822 mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()
In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...
EUVD-2026-71264
In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...
CVE-2026-80822 mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()
In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...
CVE-2026-80822
CVE-2026-80822 affects the Linux kernel's mchp-ipc-sbi mailbox driver. The root cause is a missing null check on the return value of devm_kasprintf() in the function mchp_ipc_get_cluster_aggr_irq() . Without this check, a failed allocation could lead to a NULL pointer dereference. The fix adds a ...
Linux kernel mailbox driver module Heap Buffer Overflow
The vulnerability of the mboxtestprobe function in the drivers/mailbox/mailbox-test.c file of the Linux kernel’s mailbox driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel mailbox driver Heap Buffer Overflow DoS
The vulnerability of the mboxcontrollerregister function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-85687
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mailbox mchp-ipc-sbi component where the mchp ipc get cluster aggr irq function fails to verify if the devm kasprintf function returns a NULL value. This lack of a...
Linux kernel mailbox driver Heap Buffer Overflow DoS
The vulnerability of the fwmboxindexxlate function in the drivers/mailbox/mailbox.c file of the Linux kernel’s mailbox driver module is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access protected information or...
Linux Distros Unpatched Vulnerability : CVE-2026-72486
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to...
CVE-2026-72486
In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...
UBUNTU-CVE-2026-72486
In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...
CVE-2026-72486
The CVE-2026-72486 entry concerns the Linux kernel mailbox for the mtk-adsp (SOF audio) where a use-after-free (UAF) can occur during device teardown. When the SOF driver fails to initialize (e.g., firmware boot timeout), devres unwinds and frees snd_sof_dev, while the mtk_adsp_mailbox shutdown c...