CVE-2026-89725 Linux kernel media: cec: stm32 - Buffer Overflow

Linux kernel media: cec: stm32 contains a buffer overflow caused by missing bounds check on rx_msg.len in stm32_rx_done(), letting remote CEC devices write out-of-bounds memory, exploit requires enabled receiving and IRQ thread access.

CVSS base score 8.8 /10
High
CISA KEV
Not listed
Public exploit
None known
Authentication
Not required
EPSS
0.26% chance of exploitation in 30 days
View the NVD record ↗