-

CVE-2026-89751

x86/tdx: Fix off-by-one in port I/O handling

In the Linux kernel, the following vulnerability has been resolved:

x86/tdx: Fix off-by-one in port I/O handling

handle_in() and handle_out() in arch/x86/coco/tdx/tdx.c use:

    u64 mask = GENMASK(BITS_PER_BYTE * size, 0);

GENMASK(h, l) includes bit h. For size=1 (INB), this produces
GENMASK(8, 0) = 0x1FF (9 bits) instead of GENMASK(7, 0) = 0xFF (8
bits). The mask is one bit too wide for all I/O sizes.

Fix the mask calculation.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 03149948832a078f759022ed5b92e722d8d23c26
Version < c6875423ad849ac234ab9812eb72f37ff8a490b4
Status affected
Version 03149948832a078f759022ed5b92e722d8d23c26
Version < 220011fe95fc78b2bc2d7d43893bc73957a5c811
Status affected
Version 03149948832a078f759022ed5b92e722d8d23c26
Version < 222b7005e4519f633b4cd666226256abbab46a1a
Status affected
Version 03149948832a078f759022ed5b92e722d8d23c26
Version < c4a22154870813d10aa0b4c734a574c726f9d4b0
Status affected
Version 03149948832a078f759022ed5b92e722d8d23c26
Version < bb45f705c4440dd3c689328319b88dd28770bbb8
Status affected
Version 03149948832a078f759022ed5b92e722d8d23c26
Version < 0f63e656b1c679d32ac595de29d10c03efca6a25
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.19
Status affected
Version 0
Version < 5.19
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/222b7005e4519f633b4cd666226256abbab46a1a
https://git.kernel.org/stable/c/c4a22154870813d10aa0b4c734a574c726f9d4b0
https://git.kernel.org/stable/c/bb45f705c4440dd3c689328319b88dd28770bbb8
https://git.kernel.org/stable/c/0f63e656b1c679d32ac595de29d10c03efca6a25
https://git.kernel.org/stable/c/220011fe95fc78b2bc2d7d43893bc73957a5c811
https://git.kernel.org/stable/c/c6875423ad849ac234ab9812eb72f37ff8a490b4