CVE-2026-89878
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: media: s2255: check firmware size before reading trailing marker s2255_probe() reads a 4-byte marker and version from the last 8 bytes of the firmware blob (fw->data[fw_size - 8] and [fw_size - 4]). If the firmware file is shorter than 8 bytes, fw_size - 8 underflows and the access reads out of bounds. Validate the firmware size before indexing.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 16, 2026
First seenSep 16, 2026
How to fix
Update
- Linux Linux6f6a5b0b0a84c2de0e152f2841e57bc226db924f, 8eca0f85eeb0789be40e637bcf9a21c4265b6c6f, ffc27411ea60b8a09f1fea3d664b65210fdeb454, 5626785b0e4665326e4d96736c106161da09b2f0, 3e03f1209c1c8a45a7bc559f4ecd79d9b33f706d, 342632a4d8ba3fafc1556deee0b7a48dd7860336, 7d221859ba45d7228d0138c9a3e55bd3bb31e14e, 330f2936ab768c7215322a476f033143e8891d28 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 14d962602c8bf86e63c9b9272be1f0360d0a448a ≤ v < 6f6a5b0b0a84c2de0e152f2841e57bc226db924f, 14d962602c8bf86e63c9b9272be1f0360d0a448a ≤ v < 8eca0f85eeb0789be40e637bcf9a21c4265b6c6f, 14d962602c8bf86e63c9b9272be1f0360d0a448a ≤ v < ffc27411ea60b8a09f1fea3d664b65210fdeb454, 14d962602c8bf86e63c9b9272be1f0360d0a448a ≤ v < 5626785b0e4665326e4d96736c106161da09b2f0, 14d962602c8bf86e63c9b9272be1f0360d0a448a ≤ v < 3e03f1209c1c8a45a7bc559f4ecd79d9b33f706d, 14d962602c8bf86e63c9b9272be1f0360d0a448a ≤ v < 342632a4d8ba3fafc1556deee0b7a48dd7860336, 14d962602c8bf86e63c9b9272be1f0360d0a448a ≤ v < 7d221859ba45d7228d0138c9a3e55bd3bb31e14e, 14d962602c8bf86e63c9b9272be1f0360d0a448a ≤ v < 330f2936ab768c7215322a476f033143e8891d28, 2.6.28 | 6f6a5b0b0a84c2de0e152f2841e57bc226db924f, 8eca0f85eeb0789be40e637bcf9a21c4265b6c6f, ffc27411ea60b8a09f1fea3d664b65210fdeb454, 5626785b0e4665326e4d96736c106161da09b2f0, 3e03f1209c1c8a45a7bc559f4ecd79d9b33f706d, 342632a4d8ba3fafc1556deee0b7a48dd7860336, 7d221859ba45d7228d0138c9a3e55bd3bb31e14e, 330f2936ab768c7215322a476f033143e8891d28 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.