CECster

CECSTeR CECSTeR is the Consumer Electronics Control Security Testing Resource - a GUI-based tool to perform security testing against the HDMI CEC Consumer Electronics Control and HEC HDMI Ethernet Channel protocols Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by...

CVE-2026-89900

A flaw was found in the Linux kernel's media CEC Consumer Electronics Control core. A memory leak kmemleak can occur because a device deallocation function rcfreedevice is not called when a CEC device is unbound. This oversight, introduced by a previous code change, prevents the proper release of...

DEBIAN-CVE-2026-89899

In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in waitforcompletionkillable. If that wait is interrupted by a signal, canceldelayedworksync...

CVE-2026-89899

In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in waitforcompletionkillable. If that wait is interrupted by a signal, canceldelayedworksync...

AZL-101120 CVE-2026-89900 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: media: cec: core: Fix kmemleak due to missed rcfreedevice call The commit dccc0c3ddf8f "media: rc: fix race between unregister and urb/irq callbacks" removed the implicit call to rcfreedevice from rcunregisterdevice. However, the...

DEBIAN-CVE-2026-89900

In the Linux kernel, the following vulnerability has been resolved: media: cec: core: Fix kmemleak due to missed rcfreedevice call The commit dccc0c3ddf8f "media: rc: fix race between unregister and urb/irq callbacks" removed the implicit call to rcfreedevice from rcunregisterdevice. However, the...

CVE-2026-89900

In the Linux kernel, the following vulnerability has been resolved: media: cec: core: Fix kmemleak due to missed rcfreedevice call The commit dccc0c3ddf8f "media: rc: fix race between unregister and urb/irq callbacks" removed the implicit call to rcfreedevice from rcunregisterdevice. However, the...

AZL-101349 CVE-2026-89897 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cecreceivenotify reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release...

AZL-101241 CVE-2026-89899 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in waitforcompletionkillable. If that wait is interrupted by a signal, canceldelayedworksync...

CVE-2026-89900 media: cec: core: Fix kmemleak due to missed rc_free_device() call

In the Linux kernel, the following vulnerability has been resolved: media: cec: core: Fix kmemleak due to missed rcfreedevice call The commit dccc0c3ddf8f "media: rc: fix race between unregister and urb/irq callbacks" removed the implicit call to rcfreedevice from rcunregisterdevice. However, the...

CVE-2026-89900 media: cec: core: Fix kmemleak due to missed rc_free_device() call

In the Linux kernel, the following vulnerability has been resolved: media: cec: core: Fix kmemleak due to missed rcfreedevice call The commit dccc0c3ddf8f "media: rc: fix race between unregister and urb/irq callbacks" removed the implicit call to rcfreedevice from rcunregisterdevice. However, the...

CVE-2026-89900

CVE-2026-89900 is a kernel memory leak in the Linux kernel's media/cec/core subsystem. A prior commit that fixed a race condition between unregister and urb/irq callbacks removed the implicit call to rc_free_device() from rc_unregister_device() but failed to remove the NULL assignment of adap-&gt...

EUVD-2026-80500

In the Linux kernel, the following vulnerability has been resolved: media: cec: core: Fix kmemleak due to missed rcfreedevice call The commit dccc0c3ddf8f "media: rc: fix race between unregister and urb/irq callbacks" removed the implicit call to rcfreedevice from rcunregisterdevice. However, the...

CVE-2026-89899 media: cec: disable delayed work before freeing an interrupted transmit

In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in waitforcompletionkillable. If that wait is interrupted by a signal, canceldelayedworksync...

CVE-2026-89899

CVE-2026-89899 is a race condition in the Linux kernel's CEC (Consumer Electronics Control) media subsystem . In cec_transmit_msg_fh(), the adapter lock is dropped to wait for a blocking transmit; if that wait is interrupted by a signal, cancel_delayed_work_sync() can execute before the CEC kthre...

CVE-2026-89899 media: cec: disable delayed work before freeing an interrupted transmit

In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in waitforcompletionkillable. If that wait is interrupted by a signal, canceldelayedworksync...

CVE-2026-89897

CVE-2026-89897 affects the Linux kernel 's CEC (Consumer Electronics Control) media subsystem. The vulnerability resides in cec_receive_notify(), which reads the exclusive follower pointer without holding the adapter lock , creating a race condition. The fix serializes the no-follower check and m...

CVE-2026-89898 media: cec: extron-da-hd-4k-plus: add sanity check

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

EUVD-2026-80497

In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cecreceivenotify reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release...

CVE-2026-89897 media: cec: Serialize exclusive follower delivery

In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cecreceivenotify reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release...