CVE-2026-89898
media: cec: extron-da-hd-4k-plus: add sanity check
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.110, 6.18.51, 7.2.5
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg[] in case the incoming data is malformed.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 056f2821b631df2b94d3b017fd1e1eef918ed98d · fixed in 00c13b4ab481a09d915d099815cff1b10926ddd9; From 056f2821b631df2b94d3b017fd1e1eef918ed98d · fixed in 673611cc2ab9769929644ce879f7ea34932a3011; From 056f2821b631df2b94d3b017fd1e1eef918ed98d · fixed in 7ad2fec276946a0dedfa54eb26fc38c4fc6a6034; From 056f2821b631df2b94d3b017fd1e1eef918ed98d · fixed in abac9820b26b5cfcb01eb79efe2abdd0ac7e07c3
- Linux Linux
6.12
- KernelLinux
From 6.12.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.51; From 6.19.0 · fixed in 7.2.5