Skip to main content
← All vulnerabilities
CVE-2026-89876

media: tda18250: fix possible integer overflow

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.110, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. Result of shift 1 << (exp - 1) may then leads to undefined behavior.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 148abd3b5b146021a637d36ac5c0ee91cd4ad520 · fixed in cf8e3b3d7d9a6a96f4df6246e2e14b32f58d889e; From 148abd3b5b146021a637d36ac5c0ee91cd4ad520 · fixed in 4e21f0e5696d3148b183c7e21dd44f7dec0d07ef; From 148abd3b5b146021a637d36ac5c0ee91cd4ad520 · fixed in 3e5568d554c5f6da2cbba45684295927ebefd943; From 148abd3b5b146021a637d36ac5c0ee91cd4ad520 · fixed in 593b1172e5d548581dfdb9a63713088f5dfab255; From 148abd3b5b146021a637d36ac5c0ee91cd4ad520 · fixed in 0e0fbdb4c9381e2ea647a3fe3bf39bdb02ea5b73; From 148abd3b5b146021a637d36ac5c0ee91cd4ad520 · fixed in 7c62bd653563939ff0d0fdfd4b8c73c4f97a1dcc; From 148abd3b5b146021a637d36ac5c0ee91cd4ad520 · fixed in f1ba602afd5ee6609fd71a0d112d18e8447a485f; From 148abd3b5b146021a637d36ac5c0ee91cd4ad520 · fixed in 6dd8e257f7cafda7fbf10d81b3c55c9bba4825f4

  • Linux Linux

    4.16

  • KernelLinux

    From 4.16.0 · fixed in 5.10.270; From 5.11.0 · fixed in 5.15.221; From 5.16.0 · fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.51; From 6.19.0 · fixed in 7.2.5

References 8

git.kernel.org