01 Record

CVE-2026-89878

media: s2255: check firmware size before reading trailing marker

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

media: s2255: check firmware size before reading trailing marker

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 11.9% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-09-16 10:31Z1 MO AGO
Last updated: 2026-10-19 08:54Z10 DAYS AGO
Reserved: 2026-09-11
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: cc4c3639aa1791204bb0bd3a7c73151f92ede052c4eb605a98ad10c8a9952a15

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux14d962602c8bf86e63c9b9272be1f0360d0a448a to < 6f6a5b0b0a84c2de0e152f2841e57bc226db924f, 14d962602c8bf86e63c9b9272be1f0360d0a448a to < 8eca0f85eeb0789be40e637bcf9a21c4265b6c6f, 14d962602c8bf86e63c9b9272be1f0360d0a448a to < ffc27411ea60b8a09f1fea3d664b65210fdeb454, 14d962602c8bf86e63c9b9272be1f0360d0a448a to < 5626785b0e4665326e4d96736c106161da09b2f0, 14d962602c8bf86e63c9b9272be1f0360d0a448a to < 3e03f1209c1c8a45a7bc559f4ecd79d9b33f706d, 14d962602c8bf86e63c9b9272be1f0360d0a448a to < 342632a4d8ba3fafc1556deee0b7a48dd7860336, 14d962602c8bf86e63c9b9272be1f0360d0a448a to < 7d221859ba45d7228d0138c9a3e55bd3bb31e14e, 14d962602c8bf86e63c9b9272be1f0360d0a448a to < 330f2936ab768c7215322a476f033143e8891d28, 2.6.28—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/6f6a5b0b0a84c2de0e152f2841e57bc226db924f
git.kernel.orghttps://git.kernel.org/stable/c/8eca0f85eeb0789be40e637bcf9a21c4265b6c6f
git.kernel.orghttps://git.kernel.org/stable/c/ffc27411ea60b8a09f1fea3d664b65210fdeb454
git.kernel.orghttps://git.kernel.org/stable/c/5626785b0e4665326e4d96736c106161da09b2f0
git.kernel.orghttps://git.kernel.org/stable/c/3e03f1209c1c8a45a7bc559f4ecd79d9b33f706d
git.kernel.orghttps://git.kernel.org/stable/c/342632a4d8ba3fafc1556deee0b7a48dd7860336
git.kernel.orghttps://git.kernel.org/stable/c/7d221859ba45d7228d0138c9a3e55bd3bb31e14e
git.kernel.orghttps://git.kernel.org/stable/c/330f2936ab768c7215322a476f033143e8891d28

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.