CVE-2026-89751
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handle_in() and handle_out() in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASK(BITS_PER_BYTE * size, 0); GENMASK(h, l) includes bit h. For size=1 (INB), this produces GENMASK(8, 0) = 0x1FF (9 bits) instead of GENMASK(7, 0) = 0xFF (8 bits). The mask is one bit too wide for all I/O sizes. Fix the mask calculation.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 11, 2026
First seenSep 11, 2026
How to fix
Update
- Linux Linuxc6875423ad849ac234ab9812eb72f37ff8a490b4, 220011fe95fc78b2bc2d7d43893bc73957a5c811, 222b7005e4519f633b4cd666226256abbab46a1a, c4a22154870813d10aa0b4c734a574c726f9d4b0, bb45f705c4440dd3c689328319b88dd28770bbb8, 0f63e656b1c679d32ac595de29d10c03efca6a25 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 03149948832a078f759022ed5b92e722d8d23c26 ≤ v < c6875423ad849ac234ab9812eb72f37ff8a490b4, 03149948832a078f759022ed5b92e722d8d23c26 ≤ v < 220011fe95fc78b2bc2d7d43893bc73957a5c811, 03149948832a078f759022ed5b92e722d8d23c26 ≤ v < 222b7005e4519f633b4cd666226256abbab46a1a, 03149948832a078f759022ed5b92e722d8d23c26 ≤ v < c4a22154870813d10aa0b4c734a574c726f9d4b0, 03149948832a078f759022ed5b92e722d8d23c26 ≤ v < bb45f705c4440dd3c689328319b88dd28770bbb8, 03149948832a078f759022ed5b92e722d8d23c26 ≤ v < 0f63e656b1c679d32ac595de29d10c03efca6a25, 5.19 | c6875423ad849ac234ab9812eb72f37ff8a490b4, 220011fe95fc78b2bc2d7d43893bc73957a5c811, 222b7005e4519f633b4cd666226256abbab46a1a, c4a22154870813d10aa0b4c734a574c726f9d4b0, bb45f705c4440dd3c689328319b88dd28770bbb8, 0f63e656b1c679d32ac595de29d10c03efca6a25 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.