CVE-2026-89817

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gud: NUL-terminate TV mode names read from the device gud_connector_add_tv_mode() reads a buffer of fixed-size mode names from the USB device and passes pointers into it to drm_mode_create_tv_properties_legacy(), which calls strlen() on each one. Nothing guarantees the device NUL-terminates a name, so strlen() can run past the end of a slot and, for the last mode, past the end of the allocation. Terminate each name at the end of its slot before use.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-09-16 11:16:46.990000

Last modified

2026-10-19 09:18:25.563000

View original CVE JSON

{
  "id": "CVE-2026-89817",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-09-16T11:16:46.990",
  "lastModified": "2026-10-19T09:18:25.563",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gud: NUL-terminate TV mode names read from the device\n\ngud_connector_add_tv_mode() reads a buffer of fixed-size mode names from\nthe USB device and passes pointers into it to\ndrm_mode_create_tv_properties_legacy(), which calls strlen() on each one.\nNothing guarantees the device NUL-terminates a name, so strlen() can run\npast the end of a slot and, for the last mode, past the end of the\nallocation.\n\nTerminate each name at the end of its slot before use."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/gpu/drm/gud/gud_connector.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "40e1a70b4aedf2859a1829991b48ef0ebe650bf2",
              "lessThan": "08c8ec28547987e55a90c662f8795e05c2925498",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "40e1a70b4aedf2859a1829991b48ef0ebe650bf2",
              "lessThan": "9096edfd6f2edbc79612b482547e0972edbcfe4b",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "40e1a70b4aedf2859a1829991b48ef0ebe650bf2",
              "lessThan": "89210cb5ff8fdbe055c97ac688be2268f6c815ae",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "40e1a70b4aedf2859a1829991b48ef0ebe650bf2",
              "lessThan": "d0f3312f7800eb0e00d1264f66104c788f43dd69",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "40e1a70b4aedf2859a1829991b48ef0ebe650bf2",
              "lessThan": "b86438a5c6b0250ccb07dd380184d1e70e0dea6c",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "40e1a70b4aedf2859a1829991b48ef0ebe650bf2",
              "lessThan": "6ea61f1d4cbaa0db937e31bffc041fb8afeacf52",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "40e1a70b4aedf2859a1829991b48ef0ebe650bf2",
              "lessThan": "500cb24cd61bad8a2747ddfc49b7034899c82d94",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/gpu/drm/gud/gud_connector.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "5.13",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "5.13",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "5.15.221",
              "lessThanOrEqual": "5.15.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.1.188",
              "lessThanOrEqual": "6.1.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.157",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.110",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.51",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.5",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/08c8ec28547987e55a90c662f8795e05c2925498",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/500cb24cd61bad8a2747ddfc49b7034899c82d94",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6ea61f1d4cbaa0db937e31bffc041fb8afeacf52",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/89210cb5ff8fdbe055c97ac688be2268f6c815ae",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9096edfd6f2edbc79612b482547e0972edbcfe4b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b86438a5c6b0250ccb07dd380184d1e70e0dea6c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d0f3312f7800eb0e00d1264f66104c788f43dd69",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}