Out-of-bounds write in Linux kernel - CVE-2026-89898

Vulnerability details

The vulnerability allows a remote attacker to compromise confidentiality, integrity, and availability.

The vulnerability exists due to an out-of-bounds write in the extron_process_received function when processing malformed incoming data. A remote attacker can send malformed incoming data to compromise confidentiality, integrity, and availability.

Affected software

How to mitigate CVE-2026-89898

External References

• https://git.kernel.org/stable/c/00c13b4ab481a09d915d099815cff1b10926ddd9
• https://git.kernel.org/stable/c/673611cc2ab9769929644ce879f7ea34932a3011
• https://git.kernel.org/stable/c/7ad2fec276946a0dedfa54eb26fc38c4fc6a6034
• https://git.kernel.org/stable/c/abac9820b26b5cfcb01eb79efe2abdd0ac7e07c3

Related Security Bulletins

• Out-of-bounds write in Linux kernel usb extron-da-hd-4k-plus driver