Skip to main content

Linux Kernel CVE-2026-72143

| EUVDEUVD-2026-58901 HIGH
2026-08-15 416baaa9-dc9f-4396-8d5f-8c081fb06d67 GHSA-cqvm-rfr6-chr5
High
Disputed · 7.1 Vendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Share

Severity by source

Sources disagree (Low–High)
Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67) PRIMARY
7.1 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
vuln.today AI
7.1 HIGH

Local trigger via suspend/resume requires only PR:L; no data exposure so C:N; I:H and A:H for silent multi-domain power profile corruption.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
SUSE
4.4 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Red Hat
5.5 LOW
qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Generated
Aug 17, 2026 - 07:14 vuln.today
CVSS changed
Aug 17, 2026 - 06:22 NVD
7.1 (HIGH)
Patch available
Aug 15, 2026 - 07:20 EUVD
CVE Published
Aug 15, 2026 - 06:21 cve.org
UNKNOWN (no severity yet)
CVE Published
Aug 15, 2026 - 06:21 cve.org
HIGH 7.1

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: ISST: Restore SST-PP control to all domains

The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control values are read and stored for all power domains.

Use pd_info->sst_base instead of power_domain_info->sst_base, which only points to power domain 0 base address.

AnalysisAI

Incorrect pointer usage in the Intel Speed Select Technology (ISST) platform driver causes SST-PP control registers to be restored only for power domain 0 during system resume from suspend, leaving all non-zero power domains with corrupted performance profile settings. Systems running affected Linux kernel versions (6.18.16-6.18.39, 6.19.x, 7.0) on Intel Xeon hardware with multi-domain ISST configurations will silently misconfigure CPU performance profiles after any suspend/resume cycle, leading to integrity and availability impact. EPSS is at 0.21% (11th percentile) and no active exploitation has been identified; a vendor patch is available across multiple stable branches.

Technical ContextAI

The affected component is the platform/x86: ISST (Intel Speed Select Technology) driver subsystem in the Linux kernel. Intel SST is a feature present on server-class Intel Xeon processors (e.g., Ice Lake-SP, Sapphire Rapids) that allows selection of CPU performance profiles (SST-PP) per power domain - distinct voltage and frequency regions within a multi-die package. During the PM suspend path, the driver correctly iterates all power domains using pd_info->sst_base to save their SST-PP control register values. However, the resume restore path erroneously uses power_domain_info->sst_base, which is a fixed pointer to power domain 0's MMIO base address. As a result, the restore loop writes domain 0's values into what it believes are the other domains' registers, but actually writes back to domain 0's address space, leaving domains 1 through N-1 in whatever transient hardware state exists post-resume. No CWE was formally assigned, but the root cause is a classic wrong-variable logic error in symmetric save/restore code - the save path uses the per-domain iterator while the restore path references a static global. The fix replaces power_domain_info->sst_base with pd_info->sst_base in the restore loop.

RemediationAI

Upgrade to a patched Linux kernel version: 6.18.40, 7.1.5, or 7.2-rc1, all of which include the corrective commits (2565a28cdcdcb035e151d285efcba26bccb3726e, 2a42f651cce91e9cbe65fe933622c522cbb1868b, cea03d67db3a880893360bdbb1b0b8d9b33b1799) available at https://git.kernel.org/stable/. If an immediate kernel upgrade is not feasible on affected Intel Xeon ISST servers, two compensating controls exist. First, disable system suspend and hibernate states via systemd to prevent the resume path from executing: systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target - trade-off is loss of power-saving sleep states, which is usually acceptable in datacenter environments. Second, unloading the isst_if_mbox_pci kernel module (modprobe -r isst_if_mbox_pci) removes the vulnerable driver entirely - trade-off is complete loss of ISST/SST-PP management functionality, potentially affecting workloads that rely on Intel performance profile switching. Neither workaround substitutes for patching.

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0 Not-Affected

Share

CVE-2026-72143 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy