CVE-2026-72143

Received Received - Intake

Linux Kernel SST-PP Control Restoration Vulnerability

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control values are read and stored for all power domains. Use pd_info->sst_base instead of power_domain_info->sst_base, which only points to power domain 0 base address.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72143

EUVD

EUVD-2026-58901

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves incorrect restoration of SST-PP control settings during system resume. Normally, control values for all power domains are stored during suspend, but only domain 0's settings are restored. The fix ensures all domains receive their correct control values by using the proper base address pointer.

Detection Guidance

This vulnerability is specific to the Linux kernel and relates to SST-PP control restoration. Detection requires checking kernel logs for suspend/resume issues or SST-PP control errors. Commands like dmesg | grep -i sst or journalctl -k | grep -i sst may help identify related errors.

Impact Analysis

This issue may cause inconsistent power management behavior after system resume, potentially leading to reduced performance or unexpected system behavior. It primarily affects systems using Intel Speed Select Technology Power and Performance (SST-PP) features.

Mitigation Strategies

Update the Linux kernel to the latest patched version. Monitor kernel logs for SST-PP control errors during suspend/resume cycles. If affected, apply vendor patches or disable SST-PP features if not critical.

Hi! I’m here to help you understand CVE-2026-72143. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70