SB2026102418 - Race condition in Linux kernel mailbox driver

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-98903)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to potentially cause a denial of service by disrupting shared interrupt handling.

The vulnerability exists due to a race condition in the Linux kernel i.MX mailbox driver when receive interrupt processing overlaps with channel shutdown. A local user can attempt to trigger this overlap to leave receive events enabled after the channel's interrupt handler is removed, potentially causing the interrupt core to disable the shared interrupt when the removed channel subsequently generates an interrupt.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/02273054b2e94e53065ea5644265bb9d8f7ee2a7
• https://git.kernel.org/stable/c/5ccea7eacb7786c358833634f45700365f6c1d99
• https://git.kernel.org/stable/c/944d8509c2220a2313d4a094a646507929fb6f8d