CVE-2026-89876 PUBLISHED

media: tda18250: fix possible integer overflow

Assigner: Linux
Reserved: 11.09.2026 Published: 16.09.2026 Updated: 16.09.2026

In the Linux kernel, the following vulnerability has been resolved:

media: tda18250: fix possible integer overflow

Integer overflow may occur, when variable exp equals to zero. Result of shift 1 << (exp - 1) may then leads to undefined behavior.

Vendor	Linux
Product	Linux
Versions	Default: unaffected affected from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 to cf8e3b3d7d9a6a96f4df6246e2e14b32f58d889e (excl.) affected from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 to 4e21f0e5696d3148b183c7e21dd44f7dec0d07ef (excl.) affected from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 to 3e5568d554c5f6da2cbba45684295927ebefd943 (excl.) affected from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 to 593b1172e5d548581dfdb9a63713088f5dfab255 (excl.) affected from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 to 0e0fbdb4c9381e2ea647a3fe3bf39bdb02ea5b73 (excl.) affected from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 to 7c62bd653563939ff0d0fdfd4b8c73c4f97a1dcc (excl.) affected from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 to f1ba602afd5ee6609fd71a0d112d18e8447a485f (excl.) affected from 148abd3b5b146021a637d36ac5c0ee91cd4ad520 to 6dd8e257f7cafda7fbf10d81b3c55c9bba4825f4 (excl.)

Vendor	Linux
Product	Linux
Versions	Default: affected Version 4.16 is affected unaffected from 0 to 4.16 (excl.) unaffected from 5.10.270 to 5.10.* (incl.) unaffected from 5.15.221 to 5.15.* (incl.) unaffected from 6.1.188 to 6.1.* (incl.) unaffected from 6.6.157 to 6.6.* (incl.) unaffected from 6.12.110 to 6.12.* (incl.) unaffected from 6.18.51 to 6.18.* (incl.) unaffected from 7.2.5 to 7.2.* (incl.) unaffected from 7.3-rc1 to * (incl.)