CVE-2026-72143

platform/x86: ISST: Restore SST-PP control to all domains

State: Published
Severity: 7.1 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: ISST: Restore SST-PP control to all domains

The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control values are read and stored for all power domains.

Use pd_info->sst_base instead of power_domain_info->sst_base, which only points to power domain 0 base address.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e3704ce5d7156ee837461be99841f312c64700b0 to before cea03d67db3a880893360bdbb1b0b8d9b33b1799Affected dc7901b5a1563a9c9eb29b3b0b0dac3162065cd8 to before 2a42f651cce91e9cbe65fe933622c522cbb1868bAffected dc7901b5a1563a9c9eb29b3b0b0dac3162065cd8 to before 2565a28cdcdcb035e151d285efcba26bccb3726eAffected 2624f3bf45a830cb3b8c8b967b23a72139700562Affected 6.18.16 to before 6.18.40Affected 6.19.6 to before 6.20Affected
LinuxLinux	7.0Affected before 7.0Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

e3704ce5d7156ee837461be99841f312c64700b0 to before cea03d67db3a880893360bdbb1b0b8d9b33b1799Affected
dc7901b5a1563a9c9eb29b3b0b0dac3162065cd8 to before 2a42f651cce91e9cbe65fe933622c522cbb1868bAffected
dc7901b5a1563a9c9eb29b3b0b0dac3162065cd8 to before 2565a28cdcdcb035e151d285efcba26bccb3726eAffected
2624f3bf45a830cb3b8c8b967b23a72139700562Affected
6.18.16 to before 6.18.40Affected
6.19.6 to before 6.20Affected

LinuxLinux

7.0Affected
before 7.0Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.