CVE-2026-89893

A flaw was found in the Linux kernel's cx23885 NetUP CI driver. This use-after-free vulnerability occurs when the netupciexit function frees a netupcistate structure while a related work item may still be pending or running. A local attacker could exploit this by triggering the module's removal,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Add the missing unmap in sndcx23885hwparams In the error path, add cx23885alsadmaunmap to release the resource acquired by cx23885alsadmamap...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885vdevinit return cx23885vdevinit can return a NULL pointer, but that pointer is used in the next line without any check. Add a NULL pointer check and handle the error unwind if it is NULL...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap return check and cleanup Add a check for the return value of pciioremapbar in cx23885devsetup. If ioremap for BAR0 fails, release the already allocated PCI memory region, decrement the device count, an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - media: cx23885: Cancel the NetUP CI work before termination. netupciexit frees the netupcistate while its work item is still in use. netupreadcistatus may still be pending or running on the system’s workqueue. The worker...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Media: PCI: cx23885: Fixed error handling in cx23885initdev When the driver fails to call dmasetmask, the driver will encounter the following error: 55.853884 BUG: KASAN: Use-after-free in processremoveddriver+0x3c/0x240 55.85448...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Fix a null-ptr-deref bug in bufferprepare and bufferfinish When the driver calls cx23885riscbuffer to prepare the buffer, the function call dmaalloccoherent may fail, resulting in an empty buffer risc-cpu. Later,...

ROS-20261009-73-0197

The vulnerability of the “drivers/media/pci/cx23885/cx23885-alsa.c” component in the Linux operating system kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

SUSE CVE-2026-89893

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on the system workqueue. The worker obtains the state with containerof...

CVE-2026-89893

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on the system workqueue. The worker obtains the state with containerof...

DEBIAN-CVE-2026-89893

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on the system workqueue. The worker obtains the state with containerof...

AZL-101516 CVE-2026-89893 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on the system workqueue. The worker obtains the state with containerof...

EUVD-2026-80493

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on the system workqueue. The worker obtains the state with containerof...

CVE-2026-89893 media: cx23885: cancel NetUP CI work before teardown

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on the system workqueue. The worker obtains the state with containerof...

CVE-2026-89893 media: cx23885: cancel NetUP CI work before teardown

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on the system workqueue. The worker obtains the state with containerof...

CVE-2026-89893

CVE-2026-89893 is a use-after-free vulnerability in the Linux kernel's media/cx23885 driver, specifically in the NetUP CI (Common Interface) path. During device removal, cx23885_finidev() calls free_irq() before the CI device is unregistered. Because free_irq() does not drain work items previousl...

CVE-2026-89893: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on the system workqueue. The worker obtains the state with containerof...

Linux Distros Unpatched Vulnerability : CVE-2026-89893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cx23885: cancel NetUP CI work before teardown netupciexit frees a netupcistate while its work item, netupreadcistatus, may still be pending or running on...

PT-2026-93534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the cx23885 media driver. The netup ci exit function frees the netup ci state while the netup read ci status work item may still be pending or executing ...

ROS-20260821-73-0006

The vulnerability of the bufferprepare function in the driver/media/pci/cx23885/cx23885-core.c file of the Linux operating system’s multimedia device driver library is related to the dereferencing of pointers due to lack of checking of the return value. Exploiting this vulnerability could allow a...