vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-89897

media: cec: Serialize exclusive follower delivery

HIGH
7.5
CVSS Score
Published: September 16, 2026 at 10:31 AM UTC
Updated: October 19, 2026 at 09:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cec_receive_notify() reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.89881fe0ca187c213eb3a6a8e78e45ad4d1cec171
Vendor states this is fixed in 1924d0788caa6c66fd320dd4704fae99487fd2c7 (fixed)
Vendor states this is fixed in 271e57a936dcdbaecb4b1bd005d9a285bbe60ab4 (fixed)
Vendor states this is fixed in 4b532b271c91790b7ab661cd488a7ad36f5c4f6b (fixed)
Vendor states this is fixed in 5c62095acc2a952099688774513c4a637bcdb2b5 (fixed)
Vendor states this is fixed in ae614f48712156fb0f55b207338d48d422c58bc0 (fixed)
Vendor states this is fixed in cac577854826950dda4d53569728b1da6c1425d5 (fixed)
Vendor states this is fixed in df941e6851da17fc53c7f6af2bdcc7383d17babc (fixed)
Vendor states this is fixed in efc829b4b937f98c4467bffe9243f756b7cfbf7f (fixed)
Vendor states this is fixed in 4.8 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.51 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.5 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/efc829b4b937f98c4467bffe9243f756b7cfbf7f
Source: cverecord
https://git.kernel.org/stable/c/cac577854826950dda4d53569728b1da6c1425d5
Source: cverecord
https://git.kernel.org/stable/c/4b532b271c91790b7ab661cd488a7ad36f5c4f6b
Source: cverecord
https://git.kernel.org/stable/c/271e57a936dcdbaecb4b1bd005d9a285bbe60ab4
Source: cverecord
https://git.kernel.org/stable/c/df941e6851da17fc53c7f6af2bdcc7383d17babc
Source: cverecord
https://git.kernel.org/stable/c/5c62095acc2a952099688774513c4a637bcdb2b5
Source: cverecord
https://git.kernel.org/stable/c/ae614f48712156fb0f55b207338d48d422c58bc0
Source: cverecord
https://git.kernel.org/stable/c/1924d0788caa6c66fd320dd4704fae99487fd2c7

CVSS

7.5HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card