GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-89599 (GCVE-0-2026-89599)

Vulnerability from cvelistv5 – Published: 2026-09-11 19:45 – Updated: 2026-09-14 12:01
VLAI
Title
fbdev: omapfb: panel-dsi-cm: initialize lock before registering display
Summary
In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicm_probe() registers the display before initializing ddata->lock. Once omapdss_register_display() publishes the display, another consumer can reach a dsicm callback that takes this mutex while it is still uninitialized. Initialize the mutex before registering the display so the published callbacks always see a valid lock.
Severity
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: f76ee892a99e68b55402b8d4b8aeffcae2aff34d , < ef20d4e17d7fb0d83144caa9667e6f3198288993 (git)
Affected: f76ee892a99e68b55402b8d4b8aeffcae2aff34d , < e7023d18c4eb292f886b31a3576402cb0e357df7 (git)
Affected: f76ee892a99e68b55402b8d4b8aeffcae2aff34d , < f33a96e49284589257e90ddc4394ec0c6bf11ec4 (git)
Affected: f76ee892a99e68b55402b8d4b8aeffcae2aff34d , < 302d19fbc7dc7e9f498930c66d65ff711ba5ba9f (git)
Affected: f76ee892a99e68b55402b8d4b8aeffcae2aff34d , < 2c3f8c9c995db185284b079f39177e85b2258176 (git)
Affected: f76ee892a99e68b55402b8d4b8aeffcae2aff34d , < 76818e81cfcae33b09b739de09162c7d8d89bf0b (git)
Affected: f76ee892a99e68b55402b8d4b8aeffcae2aff34d , < 09db79078f25c048cfb5d7849795c70415ab8574 (git)
Affected: f76ee892a99e68b55402b8d4b8aeffcae2aff34d , < f8e43fe0f22b7137ce456e6fe3581d3098174f74 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.5
Unaffected: 0 , < 4.5 (semver)
Unaffected: 5.10.270 , ≤ 5.10.* (semver)
Unaffected: 5.15.221 , ≤ 5.15.* (semver)
Unaffected: 6.1.188 , ≤ 6.1.* (semver)
Unaffected: 6.6.157 , ≤ 6.6.* (semver)
Unaffected: 6.12.109 , ≤ 6.12.* (semver)
Unaffected: 6.18.50 , ≤ 6.18.* (semver)
Unaffected: 7.2.4 , ≤ 7.2.* (semver)
Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/video/fbdev/omap2/omapfb/displays/panel-dsi-cm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ef20d4e17d7fb0d83144caa9667e6f3198288993",
              "status": "affected",
              "version": "f76ee892a99e68b55402b8d4b8aeffcae2aff34d",
              "versionType": "git"
            },
            {
              "lessThan": "e7023d18c4eb292f886b31a3576402cb0e357df7",
              "status": "affected",
              "version": "f76ee892a99e68b55402b8d4b8aeffcae2aff34d",
              "versionType": "git"
            },
            {
              "lessThan": "f33a96e49284589257e90ddc4394ec0c6bf11ec4",
              "status": "affected",
              "version": "f76ee892a99e68b55402b8d4b8aeffcae2aff34d",
              "versionType": "git"
            },
            {
              "lessThan": "302d19fbc7dc7e9f498930c66d65ff711ba5ba9f",
              "status": "affected",
              "version": "f76ee892a99e68b55402b8d4b8aeffcae2aff34d",
              "versionType": "git"
            },
            {
              "lessThan": "2c3f8c9c995db185284b079f39177e85b2258176",
              "status": "affected",
              "version": "f76ee892a99e68b55402b8d4b8aeffcae2aff34d",
              "versionType": "git"
            },
            {
              "lessThan": "76818e81cfcae33b09b739de09162c7d8d89bf0b",
              "status": "affected",
              "version": "f76ee892a99e68b55402b8d4b8aeffcae2aff34d",
              "versionType": "git"
            },
            {
              "lessThan": "09db79078f25c048cfb5d7849795c70415ab8574",
              "status": "affected",
              "version": "f76ee892a99e68b55402b8d4b8aeffcae2aff34d",
              "versionType": "git"
            },
            {
              "lessThan": "f8e43fe0f22b7137ce456e6fe3581d3098174f74",
              "status": "affected",
              "version": "f76ee892a99e68b55402b8d4b8aeffcae2aff34d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/video/fbdev/omap2/omapfb/displays/panel-dsi-cm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.5"
            },
            {
              "lessThan": "4.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.109",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.50",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.109",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.50",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.4",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: omapfb: panel-dsi-cm: initialize lock before registering display\n\ndsicm_probe() registers the display before initializing ddata-\u003elock.\nOnce omapdss_register_display() publishes the display, another consumer\ncan reach a dsicm callback that takes this mutex while it is still\nuninitialized.\n\nInitialize the mutex before registering the display so the published\ncallbacks always see a valid lock."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is in the OMAP DSI command-mode panel driver: dsicm_probe() publishes dsicm_ops via omapdss_register_display(), and those callbacks are reached from local omapfb probe, FBIOBLANK, and omapfb ioctls on /dev/fb*. There is no network, Bluetooth/WiFi, or USB protocol path into this code.\nAC:L - On preemptible kernels dsicm_probe() can be preempted after omapdss_register_display() adds the panel to panel_list and before mutex_init(\u0026ddata-\u003elock). Concurrent omapfb_probe then calls dsicm_enable/enable_te/update on that published device, so the race is driven by the in-kernel consumer rather than an uninfluenced hardware lottery.\nPR:N - dsicm_probe() and the omapfb consumer (omapfb_init_display \u2192 driver-\u003eenable/update) run from platform/deferred probe during boot on boards with an omapdss,panel-dsi-cm node. That path has no capable() or credential check and needs no OS account.\nUI:N - Display registration and omapfb\u2019s subsequent enable/update run automatically during device enumeration on affected TI OMAP systems; no victim must open /dev/fb*, write sysfs, or mount a filesystem.\nS:U - Uninitialized-mutex use and any follow-on lock or DSI-state corruption remain inside the host omapfb/omapdss driver. This is not a VM escape, IOMMU bypass, or other cross-authority impact.\nC:H - A consumer that wins the race mutex_lock()s kzalloc\u2019d ddata-\u003elock (NULL wait_list); probe can then mutex_init() a lock another thread still holds so two threads enter dsicm_enable/update. That lock-state corruption is kernel memory-unsafety that can be leveraged for disclosure, not a small bounded leak.\nI:H - mutex_init() of a mutex another thread still holds resets owner and wait_list while dsicm callbacks run unsynchronized against DSI bus and panel_drv_data state, giving write and control-flow primitives rather than a pure crash.\nA:H - CONFIG_DEBUG_MUTEXES treats lock-used-without-init as an oops, and a corrupted mutex wait_list or double-entry into DSI enable/disable causes a kernel oops, panic, or hang, fully denying availability."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T12:01:22.440Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ef20d4e17d7fb0d83144caa9667e6f3198288993"
        },
        {
          "url": "https://git.kernel.org/stable/c/e7023d18c4eb292f886b31a3576402cb0e357df7"
        },
        {
          "url": "https://git.kernel.org/stable/c/f33a96e49284589257e90ddc4394ec0c6bf11ec4"
        },
        {
          "url": "https://git.kernel.org/stable/c/302d19fbc7dc7e9f498930c66d65ff711ba5ba9f"
        },
        {
          "url": "https://git.kernel.org/stable/c/2c3f8c9c995db185284b079f39177e85b2258176"
        },
        {
          "url": "https://git.kernel.org/stable/c/76818e81cfcae33b09b739de09162c7d8d89bf0b"
        },
        {
          "url": "https://git.kernel.org/stable/c/09db79078f25c048cfb5d7849795c70415ab8574"
        },
        {
          "url": "https://git.kernel.org/stable/c/f8e43fe0f22b7137ce456e6fe3581d3098174f74"
        }
      ],
      "title": "fbdev: omapfb: panel-dsi-cm: initialize lock before registering display",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-89599",
    "datePublished": "2026-09-11T19:45:02.112Z",
    "dateReserved": "2026-09-11T19:38:34.731Z",
    "dateUpdated": "2026-09-14T12:01:22.440Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-89599",
      "date": "2026-09-16",
      "epss": "0.00144",
      "percentile": "0.0403"
    },
    "microsoft_vex": {
      "current_release_date": "2026-09-15T01:46:32.000Z",
      "cve": "CVE-2026-89599",
      "id": "msrc_CVE-2026-89599",
      "initial_release_date": "2026-09-13T01:04:33.000Z",
      "product_status:known_not_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "fbdev: omapfb: panel-dsi-cm: initialize lock before registering display",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-89599.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-89599\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-09-11T20:19:44.733\",\"lastModified\":\"2026-09-14T13:19:14.150\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nfbdev: omapfb: panel-dsi-cm: initialize lock before registering display\\n\\ndsicm_probe() registers the display before initializing ddata-\u003elock.\\nOnce omapdss_register_display() publishes the display, another consumer\\ncan reach a dsicm callback that takes this mutex while it is still\\nuninitialized.\\n\\nInitialize the mutex before registering the display so the published\\ncallbacks always see a valid lock.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/video/fbdev/omap2/omapfb/displays/panel-dsi-cm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"f76ee892a99e68b55402b8d4b8aeffcae2aff34d\",\"lessThan\":\"ef20d4e17d7fb0d83144caa9667e6f3198288993\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f76ee892a99e68b55402b8d4b8aeffcae2aff34d\",\"lessThan\":\"e7023d18c4eb292f886b31a3576402cb0e357df7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f76ee892a99e68b55402b8d4b8aeffcae2aff34d\",\"lessThan\":\"f33a96e49284589257e90ddc4394ec0c6bf11ec4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f76ee892a99e68b55402b8d4b8aeffcae2aff34d\",\"lessThan\":\"302d19fbc7dc7e9f498930c66d65ff711ba5ba9f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f76ee892a99e68b55402b8d4b8aeffcae2aff34d\",\"lessThan\":\"2c3f8c9c995db185284b079f39177e85b2258176\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f76ee892a99e68b55402b8d4b8aeffcae2aff34d\",\"lessThan\":\"76818e81cfcae33b09b739de09162c7d8d89bf0b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f76ee892a99e68b55402b8d4b8aeffcae2aff34d\",\"lessThan\":\"09db79078f25c048cfb5d7849795c70415ab8574\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f76ee892a99e68b55402b8d4b8aeffcae2aff34d\",\"lessThan\":\"f8e43fe0f22b7137ce456e6fe3581d3098174f74\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/video/fbdev/omap2/omapfb/displays/panel-dsi-cm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.5\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.5\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.270\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.221\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.188\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.157\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.109\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.50\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2.4\",\"lessThanOrEqual\":\"7.2.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.3-rc1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.5,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/09db79078f25c048cfb5d7849795c70415ab8574\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/2c3f8c9c995db185284b079f39177e85b2258176\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/302d19fbc7dc7e9f498930c66d65ff711ba5ba9f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/76818e81cfcae33b09b739de09162c7d8d89bf0b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/e7023d18c4eb292f886b31a3576402cb0e357df7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ef20d4e17d7fb0d83144caa9667e6f3198288993\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f33a96e49284589257e90ddc4394ec0c6bf11ec4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f8e43fe0f22b7137ce456e6fe3581d3098174f74\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-13T06:58:41+00:00",
      "cve": "CVE-2026-89599",
      "id": "CVE-2026-89599",
      "initial_release_date": "2026-09-11T19:45:02.112000+00:00",
      "product_status:known_affected": "2",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Linux kernel: Denial of Service due to uninitialized mutex in `fbdev: omapfb: panel-dsi-cm`",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89599.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-16T00:01:44Z",
      "cve": "CVE-2026-89599",
      "id": "CVE-2026-89599",
      "initial_release_date": "2026-09-12T16:25:25Z",
      "product_status:known_affected": "263",
      "product_status:known_not_affected": "90",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-89599",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-89599.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.