CVE-2026-89751x86/tdx: Fix off-by-one in port I/O handling
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handle_in() and handle_out() in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASK(BITS_PER_BYTE * size, 0); GENMASK(h, l) includes bit h. For size=1 (INB), this produces GENMASK(8, 0) = 0x1FF (9 bits) instead of GENMASK(7, 0) = 0xFF (8 bits). The mask is one bit too wide for all I/O sizes. Fix the mask calculation.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 14, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 03149948832a078f759022ed5b92e722d8d23c26 before c6875423ad849ac234ab9812eb72f37ff8a490b4; 03149948832a078f759022ed5b92e722d8d23c26 builds before 220011fe95fc78b2bc2d7d43893bc73957a5c811; 03149948832a078f759022ed5b92e722d8d23c26 builds before 222b7005e4519f633b4cd666226256abbab46a1a; from 03149948832a078f759022ed5b92e722d8d23c26 before c4a22154870813d10aa0b4c734a574c726f9d4b0; from 03149948832a078f759022ed5b92e722d8d23c26 before bb45f705c4440dd3c689328319b88dd28770bbb8; 03149948832a078f759022ed5b92e722d8d23c26 builds before 0f63e656b1c679d32ac595de29d10c03efca6a25 | CNA record |
References
- https://git.kernel.org/stable/c/c6875423ad849ac234ab9812eb72f37ff8a490b4
- https://git.kernel.org/stable/c/220011fe95fc78b2bc2d7d43893bc73957a5c811
- https://git.kernel.org/stable/c/222b7005e4519f633b4cd666226256abbab46a1a
- https://git.kernel.org/stable/c/c4a22154870813d10aa0b4c734a574c726f9d4b0
- https://git.kernel.org/stable/c/bb45f705c4440dd3c689328319b88dd28770bbb8
- https://git.kernel.org/stable/c/0f63e656b1c679d32ac595de29d10c03efca6a25
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.