SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89751

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the x86 architecture's port I/O handling, specifically in the functions handle_in() and handle_out(), where an off-by-one error in the mask calculation could lead to improper data handling. This flaw may allow for unintended access or manipulation of I/O operations, potentially compromising system integrity. Organizations utilizing Linux on x86 systems should prioritize addressing this issue to mitigate risks associated with data leakage or corruption.

CVE
CVE-2026-89751
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handle_in() and handle_out() in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASK(BITS_PER_BYTE * size, 0); GENMASK(h, l) includes bit h. For size=1 (INB), this produces GENMASK(8, 0) = 0x1FF (9 bits) instead of GENMASK(7, 0) = 0xFF (8 bits). The mask is one bit too wide for all I/O sizes. Fix the mask calculation.