cxl mailbox

  1. CVE-2026-23327: Fixing Kernel CXL Mailbox Payload Validation Before Access

    CVE-2026-23327 is one of those kernel security bugs that looks small at first glance and then turns out to be a revealing case study in how modern driver code fails. The issue sits in the Linux CXL mailbox path, where the cxl_payload_from_user_allowed() helper can reach into message contents...