Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-89817

drm/gud: NUL-terminate TV mode names read from the device

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gud: NUL-terminate TV mode names read from the device gud_connector_add_tv_mode() reads a buffer of fixed-size mode names from the USB device and passes pointers into it to drm_mode_create_tv_properties_legacy(), which calls strlen() on each one. Nothing guarantees the device NUL-terminates a name, so strlen() can run past the end of a slot and, for the last mode, past the end of the allocation. Terminate each name at the end of its slot before use.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < 08c8ec28547987e55a90c662f8795e05c2925498affected
  • 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < 9096edfd6f2edbc79612b482547e0972edbcfe4baffected
  • 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < 89210cb5ff8fdbe055c97ac688be2268f6c815aeaffected
  • 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < d0f3312f7800eb0e00d1264f66104c788f43dd69affected
  • 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < b86438a5c6b0250ccb07dd380184d1e70e0dea6caffected
  • 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < 6ea61f1d4cbaa0db937e31bffc041fb8afeacf52affected
  • 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to < 500cb24cd61bad8a2747ddfc49b7034899c82d94affected

Linux Linux

Default version status: affected

  • 5.13affected
  • 0 to < 5.13unaffected
  • 5.15.221 to ≤ 5.15.*unaffected
  • 6.1.188 to ≤ 6.1.*unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.51 to ≤ 6.18.*unaffected
  • 7.2.5 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References