platform/x86: ISST: Validate logical CPU id and clos id (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 11 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU number greater than the supported maximum. These are used to calculate MMIO offset.
References
- https://git.kernel.org/stable/c/0d601126c7afda9bb94dfecc8b2c0a16f20d76cb
- https://git.kernel.org/stable/c/c9ee2770eb95ba316a56d776b2b66666b70c194b
- https://git.kernel.org/stable/c/5b032e1dda486ca41d10536bd195bd8a559af1e2
- https://git.kernel.org/stable/c/82d4afadb02fb4d7d7bb9230900904c10e49ec87
- https://git.kernel.org/stable/c/124e2dbabe460c2a6e7440f4ad8af560131295c9
European references
- ENISA EUVD · EUVD-2026-76344
- GCVE · GCVE-0-2026-89438
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 12a7d2cb811dd8a884dea088a2701fcb8d00136e < 0d601126c7afda9bb94dfecc8b2c0a16f20d76cb ; affected 12a7d2cb811dd8a884dea088a2701fcb8d00136e < c9ee2770eb95ba316a56d776b2b66666b70c194b ; affected 12a7d2cb811dd8a884dea088a2701fcb8d00136e < 5b032e1dda486ca41d10536bd195bd8a559af1e2 ; affected 12a7d2cb811dd8a884dea088a2701fcb8d00136e < 82d4afadb02fb4d7d7bb9230900904c10e49ec87 ; affected 12a7d2cb811dd8a884dea088a2701fcb8d00136e < 124e2dbabe460c2a6e7440f4ad8af560131295c9 |
| Linux · Linux | affected 6.4 ; unaffected 0 < 6.4 ; unaffected 6.6.157 ≤ 6.6.* ; unaffected 6.12.109 ≤ 6.12.* ; unaffected 6.18.50 ≤ 6.18.* ; unaffected 7.2.4 ≤ 7.2.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |