CVE-2026-89817

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/gud component where the gud connector add tv mode() function reads fixed-size mode names from a USB device. These pointers are passed to drm mode create tv properties legacy(), which utilizes strlen() to determine the length of each name. Because the device does not guarantee that names are NUL-terminated (marked with a null character to signal the end of a string), strlen() may read beyond the allocated memory slot or the end of the total allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.