CVE-2026-89443: In the Linux kernel, the following vulnerability vulnerability

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perf_level_mask() and isst_if_get_base_freq_mask() use the user-provided level as an index into perf_levels[] via _read_pp_level_info() and _read_bf_level_info(), but neither helper validates it first. A security weakness in the Linux kernel, the following vulnerability is being tracked as CVE-2026-89443. The important point is that running an affected version of the Linux kernel, the following vulnerability creates exposure, while an actual compromise still depends on whether the attacker can reach the trigger conditions described above. For an organization using the Linux kernel, the following vulnerability, the next step is to identify affected versions, map where the vulnerable function is reachable and understand what the affected process can access.

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perf_level_mask() and isst_if_get_base_freq_mask() use the user-provided level as an index into perf_levels[] via _read_pp_level_info() and _read_bf_level_info(), but neither helper validates it first.

No active exploitation was identified in the current reporting reviewed.

No exploitation flag is present in the retained CyberDeltaForce data at this time; that status can change as vendor and threat-intelligence reporting develops.

Inventory the affected product deployments and confirm whether the affected component and vulnerable release are present.