Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-89897

media: cec: Serialize exclusive follower delivery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cec_receive_notify() reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 to < efc829b4b937f98c4467bffe9243f756b7cfbf7faffected
  • 9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 to < cac577854826950dda4d53569728b1da6c1425d5affected
  • 9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 to < 4b532b271c91790b7ab661cd488a7ad36f5c4f6baffected
  • 9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 to < 271e57a936dcdbaecb4b1bd005d9a285bbe60ab4affected
  • 9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 to < df941e6851da17fc53c7f6af2bdcc7383d17babcaffected
  • 9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 to < 5c62095acc2a952099688774513c4a637bcdb2b5affected
  • 9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 to < ae614f48712156fb0f55b207338d48d422c58bc0affected
  • 9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 to < 1924d0788caa6c66fd320dd4704fae99487fd2c7affected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 5.10.270 to ≤ 5.10.*unaffected
  • 5.15.221 to ≤ 5.15.*unaffected
  • 6.1.188 to ≤ 6.1.*unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.51 to ≤ 6.18.*unaffected
  • 7.2.5 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References