14 matches found
CVE-2026-89900
A flaw was found in the Linux kernel's media CEC Consumer Electronics Control core. A memory leak kmemleak can occur because a device deallocation function rcfreedevice is not called when a CEC device is unbound. This oversight, introduced by a previous code change, prevents the proper release of...
DEBIAN-CVE-2026-89899
In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in waitforcompletionkillable. If that wait is interrupted by a signal, canceldelayedworksync...
AZL-101349 CVE-2026-89897 affecting package kernel 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cecreceivenotify reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release...
AZL-101241 CVE-2026-89899 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in waitforcompletionkillable. If that wait is interrupted by a signal, canceldelayedworksync...
CVE-2026-89899
CVE-2026-89899 is a race condition in the Linux kernel's CEC (Consumer Electronics Control) media subsystem . In cec_transmit_msg_fh(), the adapter lock is dropped to wait for a blocking transmit; if that wait is interrupted by a signal, cancel_delayed_work_sync() can execute before the CEC kthre...
CVE-2026-89897 media: cec: Serialize exclusive follower delivery
In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cecreceivenotify reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release...
CVE-2026-89900: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: cec: core: Fix kmemleak due to missed rcfreedevice call The commit dccc0c3ddf8f "media: rc: fix race between unregister and urb/irq callbacks" removed the implicit call to rcfreedevice from rcunregisterdevice. However, the...
CVE-2026-89898: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...
CVE-2026-89899: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in waitforcompletionkillable. If that wait is interrupted by a signal, canceldelayedworksync...
Linux Distros Unpatched Vulnerability : CVE-2026-89899
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in...
EUVD-2020-24207
Malware in sbrugna...
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2973-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2973-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...
