CVE-2026-89897

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: cec: Serialize exclusive follower delivery

cec_receive_notify() reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 < efc829b4b937f98c4467bffe9243f756b7cfbf7faffected
LinuxLinux9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 < cac577854826950dda4d53569728b1da6c1425d5affected
LinuxLinux9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 < 4b532b271c91790b7ab661cd488a7ad36f5c4f6baffected
LinuxLinux9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 < 271e57a936dcdbaecb4b1bd005d9a285bbe60ab4affected
LinuxLinux9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 < df941e6851da17fc53c7f6af2bdcc7383d17babcaffected
LinuxLinux9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 < 5c62095acc2a952099688774513c4a637bcdb2b5affected
LinuxLinux9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 < ae614f48712156fb0f55b207338d48d422c58bc0affected
LinuxLinux9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 < 1924d0788caa6c66fd320dd4704fae99487fd2c7affected
LinuxLinux4.8affected
LinuxLinux0 < 4.8unaffected
LinuxLinux5.10.270 <= 5.10.*unaffected
LinuxLinux5.15.221 <= 5.15.*unaffected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.51 <= 6.18.*unaffected
LinuxLinux7.2.5 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References