CVE-2026-89438

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the platform/x86 ISST component regarding the core power feature. The system fails to validate the maximum CLOS ID and logical CPU ID, which are used to calculate the Memory-Mapped I/O (MMIO) offset. MMIO is a method for the CPU to access hardware devices by mapping device registers into the system memory address space. An attacker could potentially provide a CLOS level or logical CPU number greater than the supported maximum to cause an invalid memory offset calculation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.