---
id: CVE-2026-89817
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/gud: NUL-terminate TV mode names read from the device

  gud_connector_add_tv_mode() reads a buffer of fixed-size mode names from
  the USB device and passes pointers i…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/gud: NUL-terminate TV mode names read from the device

  gud_connector_add_tv_mode() reads a buffer of fixed-size mode names from
  the USB device and passes pointers i…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 <
    08c8ec28547987e55a90c662f8795e05c2925498
  - >-
    Linux >= 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 <
    9096edfd6f2edbc79612b482547e0972edbcfe4b
  - >-
    Linux >= 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 <
    89210cb5ff8fdbe055c97ac688be2268f6c815ae
  - >-
    Linux >= 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 <
    d0f3312f7800eb0e00d1264f66104c788f43dd69
  - >-
    Linux >= 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 <
    b86438a5c6b0250ccb07dd380184d1e70e0dea6c
  - >-
    Linux >= 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 <
    6ea61f1d4cbaa0db937e31bffc041fb8afeacf52
  - >-
    Linux >= 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 <
    500cb24cd61bad8a2747ddfc49b7034899c82d94
  - Linux 5.13
published: '2026-09-16'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T11:16:46.990'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89817'
references:
  - url: 'https://git.kernel.org/stable/c/08c8ec28547987e55a90c662f8795e05c2925498'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/500cb24cd61bad8a2747ddfc49b7034899c82d94'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6ea61f1d4cbaa0db937e31bffc041fb8afeacf52'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/89210cb5ff8fdbe055c97ac688be2268f6c815ae'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9096edfd6f2edbc79612b482547e0972edbcfe4b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b86438a5c6b0250ccb07dd380184d1e70e0dea6c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d0f3312f7800eb0e00d1264f66104c788f43dd69'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-16T10:53:54.004Z'
epss: 0.00205
epssPercentile: 0.09325
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/gud: NUL-terminate TV mode names read from the device

gud_connector_add_tv_mode() reads a buffer of fixed-size mode names from
the USB device and passes pointers into it to
drm_mode_create_tv_properties_legacy(), which calls strlen() on each one.
Nothing guarantees the device NUL-terminates a name, so strlen() can run
past the end of a slot and, for the last mode, past the end of the
allocation.

Terminate each name at the end of its slot before use.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.