Nixpkgs security tracker

Try the new UI
Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
Permalink CVE-2026-89897
7.5 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Adjacent (A)
  • Attack Complexity (AC): High (H)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Adjacent (A)
  • Modified Attack Complexity (MAC): High (H)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 1 week, 4 days ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion 1 week, 4 days ago
media: cec: Serialize exclusive follower delivery

In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cec_receive_notify() reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release.

Affected products

Linux
  • <efc829b4b937f98c4467bffe9243f756b7cfbf7f
  • =<7.2.*
  • <5c62095acc2a952099688774513c4a637bcdb2b5
  • =<6.1.*
  • <271e57a936dcdbaecb4b1bd005d9a285bbe60ab4
  • <cac577854826950dda4d53569728b1da6c1425d5
  • =<6.12.*
  • <df941e6851da17fc53c7f6af2bdcc7383d17babc
  • ==4.8
  • =<5.15.*
  • <4.8
  • =<6.18.*
  • =<*
  • <4b532b271c91790b7ab661cd488a7ad36f5c4f6b
  • =<6.6.*
  • <ae614f48712156fb0f55b207338d48d422c58bc0
  • <1924d0788caa6c66fd320dd4704fae99487fd2c7
  • =<5.10.*