SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80654

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's mailbox channel management, specifically in the Xilinx SOC where the receive mailbox channel may not be properly shut down upon device removal. This oversight can lead to a use-after-free condition, allowing the channel to continue receiving messages and potentially causing resource leaks. Organizations using affected Linux kernel versions, particularly those deploying Xilinx hardware, should prioritize addressing this issue to mitigate risks associated with improper resource management and potential exploitation.

CVE
CVE-2026-80654
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mbox_request_channel_byname() in probe. In remove callback, the rx mailbox channel is cleaned up when the rx_chan is NULL due to incorrect condition check. The mailbox channel is not shutdown and it can receive messages even after the device removal. This leads to use after free. Also the channel resources are not freed. Fix this by checking the rx_chan correctly.