CVE-2026-89443platform/x86: ISST: Validate level in perf mask ioctls
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perf_level_mask() and isst_if_get_base_freq_mask() use the user-provided level as an index into perf_levels[] via _read_pp_level_info() and _read_bf_level_info(), but neither helper validates it first. The adjacent level-info helpers reject levels above max_level before reading the same per-level register block. Add the same bounds checks to the mask helpers, and reject disabled SST-PP levels in isst_if_get_perf_level_mask() to match isst_if_get_perf_level_info(). This prevents out-of-bounds reads from the per-level offset table on invalid ioctl input.
- CVSS
- 7.1 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 14, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ea009e4769fa3bd05d4c111c3b6865eb3a9be829 before beb22ebf76c0415f22d2d0c3f1ff0627e7ae4a68; from ea009e4769fa3bd05d4c111c3b6865eb3a9be829 before 1a8bab5ceee1a42a78de12d3d69f67516a20588e; from ea009e4769fa3bd05d4c111c3b6865eb3a9be829 before 1889a9156553f0692acd57caf15e877baace1a01; from ea009e4769fa3bd05d4c111c3b6865eb3a9be829 before d19385624bdfb577db9c94bb8879992fd5e17bcd; from ea009e4769fa3bd05d4c111c3b6865eb3a9be829 before 80e0d353c86a9a168ad6d213f494796294381538 | CNA record |
References
- https://git.kernel.org/stable/c/beb22ebf76c0415f22d2d0c3f1ff0627e7ae4a68
- https://git.kernel.org/stable/c/1a8bab5ceee1a42a78de12d3d69f67516a20588e
- https://git.kernel.org/stable/c/1889a9156553f0692acd57caf15e877baace1a01
- https://git.kernel.org/stable/c/d19385624bdfb577db9c94bb8879992fd5e17bcd
- https://git.kernel.org/stable/c/80e0d353c86a9a168ad6d213f494796294381538
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.