CVE-2026-89898

CVE-2026-89898

High · published September 16, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: cec: extron-da-hd-4k-plus: add sanity check

Add check to prevent overflowing msg.msg[] in case the incoming data

is malformed.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Published
2026-09-16T15:16Z
References (4)
https://git.kernel.org/stable/c/00c13b4ab481a09d915d099815cff1b10926ddd9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/673611cc2ab9769929644ce879f7ea34932a3011 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7ad2fec276946a0dedfa54eb26fc38c4fc6a6034 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/abac9820b26b5cfcb01eb79efe2abdd0ac7e07c3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:31Z
    media: cec: extron-da-hd-4k-plus: add sanity check
    cvelistv5