CVE-2026-72143
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
In the Linux kernel ISST driver, after resume, SST-PP control is only restored to power domain 0, even though values are stored for all domains. The fix uses pd_info->sst_base instead of power_domain_info->sst_base.
Risk Assessment
Incorrect restoration of control may lead to suboptimal power management or hardware malfunctions.
Recommendation
Install the Linux kernel update that includes this fix.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control values are read and stored for all power domains. Use pd_info->sst_base instead of power_domain_info->sst_base, which only points to power domain 0 base address.