CVE-2026-89876

A flaw was found in the Linux kernel's media driver for tda18250. An integer overflow can occur when a specific variable, exp, is zero, leading to undefined behavior. This issue arises from a shift operation 1 << (exp - 1) which can result in unexpected system behavior.

This vulnerability is rated as Low severity because exploitation requires local access and the presence of specialized TDA18250 television tuner hardware, which is uncommon in enterprise deployments. An invalid bitwise shift during tuner frequency calculations can lead to undefined behavior, potentially resulting in a kernel panic or denial of service. Environments without this physical media hardware attached or with the module disabled are not exposed to the flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.