CVE-2026-89725

CVE-2026-89725 affects the Linux kernel's media: cec: stm32 driver, where stm32_rx_done() writes received CEC bytes into a fixed 16-byte buffer (rx_msg.msg[]) without bounds-checking the write index. A remote CEC device on an adjacent network that transmits bytes without an end-of-message signal ...