Race condition in Linux kernel - CVE-2026-98903

Vulnerability identifier: #VU157604

CSH Severity: Low

CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98903

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to potentially cause a denial of service by disrupting shared interrupt handling.

The vulnerability exists due to a race condition in the Linux kernel i.MX mailbox driver when receive interrupt processing overlaps with channel shutdown. A local user can attempt to trigger this overlap to leave receive events enabled after the channel's interrupt handler is removed, potentially causing the interrupt core to disable the shared interrupt when the removed channel subsequently generates an interrupt.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/02273054b2e94e53065ea5644265bb9d8f7ee2a7
• https://git.kernel.org/stable/c/5ccea7eacb7786c358833634f45700365f6c1d99
• https://git.kernel.org/stable/c/944d8509c2220a2313d4a094a646507929fb6f8d

• Race condition in Linux kernel mailbox driver
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more