CVE-2026-89438

CVE-2026-89438

published September 12, 2026

CVSS
—
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: ISST: Validate logical CPU id and clos id

Validate max CLOS ID and logical CPU ID for core power feature.

Reject any clos level or logical CPU number greater than the

supported maximum. These are used to calculate MMIO offset.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.0th percentile
Published
2026-09-12T00:19Z
References (5)
https://git.kernel.org/stable/c/0d601126c7afda9bb94dfecc8b2c0a16f20d76cb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/124e2dbabe460c2a6e7440f4ad8af560131295c9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5b032e1dda486ca41d10536bd195bd8a559af1e2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/82d4afadb02fb4d7d7bb9230900904c10e49ec87 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c9ee2770eb95ba316a56d776b2b66666b70c194b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 13 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 11 SEP 19:43Z
    platform/x86: ISST: Validate logical CPU id and clos id
    cvelistv5