CVE-2026-89725

A flaw was found in the Linux kernel's media: cec: stm32 driver. A remote attacker can exploit an out-of-bounds write vulnerability by sending an overlong Consumer Electronics Control (CEC) message without an end-of-message signal. This causes the driver to write beyond an allocated buffer, potentially leading to arbitrary code execution or a denial of service. The vulnerability can be triggered without local privileges from the Interrupt Request (IRQ) thread.

This flaw is rated with an Important severity because an unauthenticated device communicating over the Consumer Electronics Control (CEC) bus can trigger kernel memory corruption without requiring local credentials. Successful exploitation could lead to a kernel crash or arbitrary code execution at the kernel level. However, this issue specifically targets the STM32 platform driver, which requires specialized embedded hardware and is not enabled in standard Red Hat Enterprise Linux kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.