CVE-2026-89899

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Consumer Electronics Control (CEC) subsystem where cec transmit msg fh() drops the adap->lock to wait for a blocking transmit using wait for completion killable(). If this wait is interrupted by a signal, cancel delayed work sync() may execute before the CEC kthread arms the reply timeout via schedule delayed work(&data->work) in the cec transmit done ts() function. Consequently, the work is armed after the cancellation attempt, leading to the data being freed while its delayed work is still pending.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.