CVE-2026-89438

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89438", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.703Z", "datePublished": "2026-09-11T19:43:08.077Z", "dateUpdated": "2026-10-19T08:46:46.711Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T08:46:46.711Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: ISST: Validate logical CPU id and clos id\n\nValidate max CLOS ID and logical CPU ID for core power feature.\nReject any clos level or logical CPU number greater than the\nsupported maximum. These are used to calculate MMIO offset."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c"], "versions": [{"version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "lessThan": "0d601126c7afda9bb94dfecc8b2c0a16f20d76cb", "status": "affected", "versionType": "git"}, {"version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "lessThan": "c9ee2770eb95ba316a56d776b2b66666b70c194b", "status": "affected", "versionType": "git"}, {"version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "lessThan": "5b032e1dda486ca41d10536bd195bd8a559af1e2", "status": "affected", "versionType": "git"}, {"version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "lessThan": "82d4afadb02fb4d7d7bb9230900904c10e49ec87", "status": "affected", "versionType": "git"}, {"version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "lessThan": "124e2dbabe460c2a6e7440f4ad8af560131295c9", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c"], "versions": [{"version": "6.4", "status": "affected"}, {"version": "0", "lessThan": "6.4", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.157", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.109", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.50", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.6.157"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.12.109"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.18.50"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/0d601126c7afda9bb94dfecc8b2c0a16f20d76cb"}, {"url": "https://git.kernel.org/stable/c/c9ee2770eb95ba316a56d776b2b66666b70c194b"}, {"url": "https://git.kernel.org/stable/c/5b032e1dda486ca41d10536bd195bd8a559af1e2"}, {"url": "https://git.kernel.org/stable/c/82d4afadb02fb4d7d7bb9230900904c10e49ec87"}, {"url": "https://git.kernel.org/stable/c/124e2dbabe460c2a6e7440f4ad8af560131295c9"}], "title": "platform/x86: ISST: Validate logical CPU id and clos id", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "0d601126c7afda9bb94dfecc8b2c0a16f20d76cb", "status": "affected", "version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "versionType": "git"}, {"lessThan": "c9ee2770eb95ba316a56d776b2b66666b70c194b", "status": "affected", "version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "versionType": "git"}, {"lessThan": "5b032e1dda486ca41d10536bd195bd8a559af1e2", "status": "affected", "version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "versionType": "git"}, {"lessThan": "82d4afadb02fb4d7d7bb9230900904c10e49ec87", "status": "affected", "version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "versionType": "git"}, {"lessThan": "124e2dbabe460c2a6e7440f4ad8af560131295c9", "status": "affected", "version": "12a7d2cb811dd8a884dea088a2701fcb8d00136e", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"lessThan": "6.4", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.157", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.109", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.50", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: ISST: Validate logical CPU id and clos id\n\nValidate max CLOS ID and logical CPU ID for core power feature.\nReject any clos level or logical CPU number greater than the\nsupported maximum. These are used to calculate MMIO offset."}], "id": "CVE-2026-89438", "lastModified": "2026-10-19T09:17:35.677", "metrics": {}, "published": "2026-09-11T20:19:24.087", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0d601126c7afda9bb94dfecc8b2c0a16f20d76cb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/124e2dbabe460c2a6e7440f4ad8af560131295c9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5b032e1dda486ca41d10536bd195bd8a559af1e2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/82d4afadb02fb4d7d7bb9230900904c10e49ec87"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c9ee2770eb95ba316a56d776b2b66666b70c194b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel: ISST input validation flaw may lead to memory corruption", "id": "2532236", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532236"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["A flaw was found in the Linux kernel, specifically within the Intel Speed Select Technology (ISST) component. This vulnerability arises from insufficient validation of input values, such as logical CPU ID and CLOS ID, used in the core power feature. A local attacker could exploit this by providing invalid input, which might lead to incorrect calculations for memory-mapped I/O (MMIO) offsets. This could result in memory corruption, potentially allowing for system instability, unauthorized information access, or an increase in privileges."], "name": "CVE-2026-89438", "public_date": "2026-09-11T19:43:08Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-89438\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-89438\nhttps://git.kernel.org/stable/c/124e2dbabe460c2a6e7440f4ad8af560131295c9\nhttps://git.kernel.org/stable/c/5b032e1dda486ca41d10536bd195bd8a559af1e2\nhttps://git.kernel.org/stable/c/82d4afadb02fb4d7d7bb9230900904c10e49ec87\nhttps://git.kernel.org/stable/c/c9ee2770eb95ba316a56d776b2b66666b70c194b"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[12a7d2cb811dd8a884dea088a2701fcb8d00136e,c9ee2770eb95ba316a56d776b2b66666b70c194b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[12a7d2cb811dd8a884dea088a2701fcb8d00136e,5b032e1dda486ca41d10536bd195bd8a559af1e2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[12a7d2cb811dd8a884dea088a2701fcb8d00136e,82d4afadb02fb4d7d7bb9230900904c10e49ec87)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[12a7d2cb811dd8a884dea088a2701fcb8d00136e,124e2dbabe460c2a6e7440f4ad8af560131295c9)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.4"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.109,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.50,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.4,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.3-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-12T03:15:06.701738+00:00", "updated": "2026-09-21T02:15:08.505215+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}