Back to CVE records
Not yet scoredPublished Sep 16, 2026
CVE-2026-89876media: tda18250: fix possible integer overflow
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. Result of shift 1 << (exp - 1) may then leads to undefined behavior.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 before cf8e3b3d7d9a6a96f4df6246e2e14b32f58d889e; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 4e21f0e5696d3148b183c7e21dd44f7dec0d07ef; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 3e5568d554c5f6da2cbba45684295927ebefd943; from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 before 593b1172e5d548581dfdb9a63713088f5dfab255; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 0e0fbdb4c9381e2ea647a3fe3bf39bdb02ea5b73; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 7c62bd653563939ff0d0fdfd4b8c73c4f97a1dcc; from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 before f1ba602afd5ee6609fd71a0d112d18e8447a485f; 148abd3b5b146021a637d36ac5c0ee91cd4ad520 builds before 6dd8e257f7cafda7fbf10d81b3c55c9bba4825f4 | CNA record |
References
- https://git.kernel.org/stable/c/cf8e3b3d7d9a6a96f4df6246e2e14b32f58d889e
- https://git.kernel.org/stable/c/4e21f0e5696d3148b183c7e21dd44f7dec0d07ef
- https://git.kernel.org/stable/c/3e5568d554c5f6da2cbba45684295927ebefd943
- https://git.kernel.org/stable/c/593b1172e5d548581dfdb9a63713088f5dfab255
- https://git.kernel.org/stable/c/0e0fbdb4c9381e2ea647a3fe3bf39bdb02ea5b73
- https://git.kernel.org/stable/c/7c62bd653563939ff0d0fdfd4b8c73c4f97a1dcc
- https://git.kernel.org/stable/c/f1ba602afd5ee6609fd71a0d112d18e8447a485f
- https://git.kernel.org/stable/c/6dd8e257f7cafda7fbf10d81b3c55c9bba4825f4
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.