CVE-2026-89897

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-89897
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89897.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89897
Downstream
Published
2026-09-16T10:31:58Z
Modified
2026-09-18T03:48:33Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
media: cec: Serialize exclusive follower delivery
Details

In the Linux kernel, the following vulnerability has been resolved:

media: cec: Serialize exclusive follower delivery

cec_receive_notify() reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89897.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9881fe0ca187c213eb3a6a8e78e45ad4d1cec171
Fixed
efc829b4b937f98c4467bffe9243f756b7cfbf7f
Fixed
cac577854826950dda4d53569728b1da6c1425d5
Fixed
4b532b271c91790b7ab661cd488a7ad36f5c4f6b
Fixed
271e57a936dcdbaecb4b1bd005d9a285bbe60ab4
Fixed
df941e6851da17fc53c7f6af2bdcc7383d17babc
Fixed
5c62095acc2a952099688774513c4a637bcdb2b5
Fixed
ae614f48712156fb0f55b207338d48d422c58bc0
Fixed
1924d0788caa6c66fd320dd4704fae99487fd2c7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89897.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.8.0
Fixed
5.10.270
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.221
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.188
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89897.json"