EUVD-2026-80498
GHSA-f232-pgf4-w544
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Malformed data arrives from an attached CEC/serial device (adjacent hardware path, AV:A), reliable corruption is non-deterministic (AC:H), no auth to the hardware channel (PR:N), and impact is DoS-dominant (A:H) with minor integrity, no info leak.
Primary rating from Vendor (Linux).
CVSS VectorVendor: Linux
Lifecycle Timeline
6DescriptionCVE.org
In the Linux kernel, the following vulnerability has been resolved:
media: cec: extron-da-hd-4k-plus: add sanity check
Add check to prevent overflowing msg.msg[] in case the incoming data is malformed.
AnalysisAI
An out-of-bounds write in the Linux kernel's HDMI-CEC driver for the Extron DA HD 4K Plus adapter (media: cec: extron-da-hd-4k-plus) lets a malicious or malfunctioning CEC device overflow the fixed-size msg.msg[] buffer, crashing the kernel and potentially corrupting kernel memory. Only hosts that have the extron-da-hd-4k-plus driver built and bound to an actual Extron DA HD 4K Plus CEC adapter are affected, and the malformed CEC message must arrive over the physically or adjacently attached CEC/serial link - there is no remote, over-the-network attack path against a default configuration. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an attacker-controlled or malfunctioning device on the host's HDMI-CEC / serial link driven by the extron-da-hd-4k-plus driver, sending a malformed CEC message whose data exceeds the size of the fixed msg.msg[] buffer. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Vendor CVSS 8.8 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) materially overstates real-world risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released kernel patch: update to Linux 6.12.110, 6.18.51, 7.2.5 or 7.3-rc1 (or pull the stable commits 00c13b4ab481a09d915d099815cff1b10926ddd9, 673611cc2ab9769929644ce879f7ea34932a3011, 7ad2fec276946a0dedfa54eb26fc38c4fc6a6034 or abac9820b26b5cfcb01eb79efe2abdd0ac7e07c3 via https://git.kernel.org/stable/c/; see also https://nvd.nist.gov/vuln/detail/CVE-2026-89898 and EUVD-2026-80498 for mapping to your distribution's kernel). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory Linux endpoints, kiosks, and AV controllers for the extron-da-hd-4k-plus kernel module (for example, run 'modinfo extron-da-hd-4k-plus' or 'lsmod | grep extron' and 'ls /lib/modules/$(uname -r)/kernel/drivers/media/cec/') and identify any host physically connected to an Extron DA HD 4K Plus CEC adapter; on those systems only, unload the module with 'modprobe -r extron-da-hd-4k-plus' and blacklist it in /etc/modprobe.d/ to prevent auto-loading, and restrict physical access to the CEC/serial link, since the attack requires an adjacent device. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today