vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-89876

media: tda18250: fix possible integer overflow

N/A
Published: September 16, 2026 at 10:31 AM UTC
Updated: October 19, 2026 at 09:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. Result of shift 1 << (exp - 1) may then leads to undefined behavior.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
148abd3b5b146021a637d36ac5c0ee91cd4ad5204.16
Vendor states this is fixed in 0e0fbdb4c9381e2ea647a3fe3bf39bdb02ea5b73 (fixed)
Vendor states this is fixed in 3e5568d554c5f6da2cbba45684295927ebefd943 (fixed)
Vendor states this is fixed in 4e21f0e5696d3148b183c7e21dd44f7dec0d07ef (fixed)
Vendor states this is fixed in 593b1172e5d548581dfdb9a63713088f5dfab255 (fixed)
Vendor states this is fixed in 6dd8e257f7cafda7fbf10d81b3c55c9bba4825f4 (fixed)
Vendor states this is fixed in 7c62bd653563939ff0d0fdfd4b8c73c4f97a1dcc (fixed)
Vendor states this is fixed in cf8e3b3d7d9a6a96f4df6246e2e14b32f58d889e (fixed)
Vendor states this is fixed in f1ba602afd5ee6609fd71a0d112d18e8447a485f (fixed)
Vendor states this is fixed in 4.16 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.51 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.5 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/cf8e3b3d7d9a6a96f4df6246e2e14b32f58d889e
Source: cverecord
https://git.kernel.org/stable/c/4e21f0e5696d3148b183c7e21dd44f7dec0d07ef
Source: cverecord
https://git.kernel.org/stable/c/3e5568d554c5f6da2cbba45684295927ebefd943
Source: cverecord
https://git.kernel.org/stable/c/593b1172e5d548581dfdb9a63713088f5dfab255
Source: cverecord
https://git.kernel.org/stable/c/0e0fbdb4c9381e2ea647a3fe3bf39bdb02ea5b73
Source: cverecord
https://git.kernel.org/stable/c/7c62bd653563939ff0d0fdfd4b8c73c4f97a1dcc
Source: cverecord
https://git.kernel.org/stable/c/f1ba602afd5ee6609fd71a0d112d18e8447a485f
Source: cverecord
https://git.kernel.org/stable/c/6dd8e257f7cafda7fbf10d81b3c55c9bba4825f4

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card