CVE-2026-89866 Linux CVE debrief

Who should care

Defenders managing Linux kernel systems, especially those handling media device operations, should assess exposure and prioritize patching affected versions. This includes reviewing STREAMOFF and V4L2_DEC_CMD_STOP path handling in Linux kernel and assessing the potential impact on media device operation stability. Defenders should also verify Linux kernel versions and apply patches for affected systems.

Why it matters

Defenders should prioritize verifying and applying patches for Linux kernel versions affected by this vulnerability, particularly those handling media device operations, to prevent potential system panics and stability issues.

• Potential system panics due to asynchronous SError interrupts
• Need for verification and patching of affected Linux kernel versions
• Possible impact on media device operation stability

Technical summary

The Linux kernel vulnerability occurs when setting the EOS flag on a runtime suspended device, leading to an asynchronous SError and kernel panic. The issue is addressed by resuming the device before setting the EOS flag. This fix matches existing runtime PM handling in wave5_vpu_dec_device_run(). The vulnerability can be triggered through STREAMOFF or V4L2_DEC_CMD_STOP paths, and defenders should prioritize verifying and applying patches for Linux kernel versions affected by this vulnerability, particularly those handling media device operations.

Defensive priority

Defenders should prioritize verifying and applying patches for Linux kernel versions affected by this vulnerability, particularly those handling media device operations.

Recommended defensive actions

• Verify Linux kernel versions and apply patches for affected systems handling media device operations
• Review STREAMOFF and V4L2_DEC_CMD_STOP path handling in Linux kernel
• Assess exposure of Linux kernel systems to potential SError interrupts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The vulnerability is resolved by resuming the device before setting the EOS flag, matching existing runtime PM handling in wave5_vpu_dec_device_run(). The issue is identified in the Linux kernel, specifically in media device operations. The EOS flag is set via send_firmware_command(), accessing VPU registers, which causes the SError when the device is runtime suspended. The fix ensures that the device is resumed before setting the EOS flag, preventing the asynchronous SError and kernel panic.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.