Answer in brief
CVE-2026-89897 records a Unknown severity vulnerability in media: cec: Serialize exclusive follower delivery. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 <efc829b4b937f98c4467bffe9243f756b7cfbf7f || >=9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 <cac577854826950dda4d53569728b1da6c1425d5 || >=9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 <4b532b271c91790b7ab661cd488a7ad36f5c4f6b || >=9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 <271e57a936dcdbaecb4b1bd005d9a285bbe60ab4 || >=9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 <df941e6851da17fc53c7f6af2bdcc7383d17babc || >=9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 <5c62095acc2a952099688774513c4a637bcdb2b5 || >=9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 <ae614f48712156fb0f55b207338d48d422c58bc0 || >=9881fe0ca187c213eb3a6a8e78e45ad4d1cec171 <1924d0788caa6c66fd320dd4704fae99487fd2c7 | efc829b4b937f98c4467bffe9243f756b7cfbf7f, cac577854826950dda4d53569728b1da6c1425d5, 4b532b271c91790b7ab661cd488a7ad36f5c4f6b, 271e57a936dcdbaecb4b1bd005d9a285bbe60ab4, df941e6851da17fc53c7f6af2bdcc7383d17babc, 5c62095acc2a952099688774513c4a637bcdb2b5, ae614f48712156fb0f55b207338d48d422c58bc0, 1924d0788caa6c66fd320dd4704fae99487fd2c7 |
| Linux/Linuxgeneric | 4.8 | Not reported |
Published upstream
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 16, 2026
In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery cec_receive_notify() reads the exclusive follower pointer without the adapter lock. Serialize the no-follower check and message delivery against mode changes and release.
Quoted source text, attributed separately from HOL analysis.