https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 18:10:15 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89899 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: cec: disable delayed work before freeing an interrupted transmit</p> <p>cec_transmit_msg_fh() drops adap-&gt;lock to wait for a blocking transmit in wait_for_completion_killable(). If that wait is interrupted by a signal, cancel_delayed_work_sync() can run before the CEC kthread arms the reply timeout via schedule_delayed_work(&amp;data-&gt;work) in cec_transmit_done_ts(). The work is then armed after the cancel, and the data is freed with its delayed_work still pending:</p> <p>ODEBUG: free active (active state 0) object: ... hint: cec_wait_timeout</p> <p>Use disable_delayed_work_sync(): it cancels the work and disables it, so the later schedule_delayed_work() becomes a no-op and the work cannot be re-armed. The data is freed right after, so it need not be re-enabled.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: cec: disable delayed work before freeing an interrupted transmit</p> <p>cec_transmit_msg_fh() drops adap-&gt;lock to wait for a blocking transmit in wait_for_completion_killable(). If that wait is interrupted by a signal, cancel_delayed_work_sync() can run before the CEC kthread arms the reply timeout via schedule_delayed_work(&amp;data-&gt;work) in cec_transmit_done_ts(). The work is then armed after the cancel, and the data is freed with its delayed_work still pending:</p> <p>ODEBUG: free active (active state 0) object: ... hint: cec_wait_timeout</p> <p>Use disable_delayed_work_sync(): it cancels the work and disables it, so the later schedule_delayed_work() becomes a no-op and the work cannot be re-armed. The data is freed right after, so it need not be re-enabled.</p> https://vulnerability.circl.lu/vuln/cve-2026-89899