7.1

CVE-2026-89443

platform/x86: ISST: Validate level in perf mask ioctls

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: ISST: Validate level in perf mask ioctls

isst_if_get_perf_level_mask() and isst_if_get_base_freq_mask() use the
user-provided level as an index into perf_levels[] via
_read_pp_level_info() and _read_bf_level_info(), but neither helper
validates it first.

The adjacent level-info helpers reject levels above max_level before
reading the same per-level register block. Add the same bounds checks to
the mask helpers, and reject disabled SST-PP levels in
isst_if_get_perf_level_mask() to match isst_if_get_perf_level_info().

This prevents out-of-bounds reads from the per-level offset table on
invalid ioctl input.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version ea009e4769fa3bd05d4c111c3b6865eb3a9be829
Version < beb22ebf76c0415f22d2d0c3f1ff0627e7ae4a68
Status affected
Version ea009e4769fa3bd05d4c111c3b6865eb3a9be829
Version < 1a8bab5ceee1a42a78de12d3d69f67516a20588e
Status affected
Version ea009e4769fa3bd05d4c111c3b6865eb3a9be829
Version < 1889a9156553f0692acd57caf15e877baace1a01
Status affected
Version ea009e4769fa3bd05d4c111c3b6865eb3a9be829
Version < d19385624bdfb577db9c94bb8879992fd5e17bcd
Status affected
Version ea009e4769fa3bd05d4c111c3b6865eb3a9be829
Version < 80e0d353c86a9a168ad6d213f494796294381538
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.4
Status affected
Version 0
Version < 6.4
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/1a8bab5ceee1a42a78de12d3d69f67516a20588e
https://git.kernel.org/stable/c/1889a9156553f0692acd57caf15e877baace1a01
https://git.kernel.org/stable/c/d19385624bdfb577db9c94bb8879992fd5e17bcd
https://git.kernel.org/stable/c/80e0d353c86a9a168ad6d213f494796294381538
https://git.kernel.org/stable/c/beb22ebf76c0415f22d2d0c3f1ff0627e7ae4a68