First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-89439

Not scored yetLast modified Oct 21, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: ISST: Add a NULL check for sst_inst[]

To be consistent with other places, add a NULL check for failed socket loading by checking isst_common.sst_inst[].

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Linux	Linux	>= d805456c712f93ba8a012430f2a93bec133b6ff4, < f7c9370dd1d3cedb80c635528271cab1d0bcb103; >= d805456c712f93ba8a012430f2a93bec133b6ff4, < 49a95fe1f64f41c2e8959e525aefdb10f23b293e; >= d805456c712f93ba8a012430f2a93bec133b6ff4, < c280fcd53b938b70c7dee9ce1a66b32bd6e5ebaa; >= d805456c712f93ba8a012430f2a93bec133b6ff4, < ef7975af15126dd70ace519da7bb33f2848b9064; >= d805456c712f93ba8a012430f2a93bec133b6ff4, < 3de2776e9d7073765c10c2326c2bda5926811ea6
Linux	Linux	6.4

References

Timeline

Published: Sep 11, 2026
Last modified: Oct 21, 2026
NVD status: Received

Related CVEs from 2026

CVE-2026-89444.3The Plugin for Google Analytics by IO technologies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and i CVE-2026-894407.8In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure request_irq CVE-2026-894417.8In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device CVE-2026-894427.8In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_assoc ioctl isst_if_clo CVE-2026-894437.1In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_per CVE-2026-89444In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer CVE-2026-894458.8In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGER_I CVE-2026-89446In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xa_store() failure iommufd_take_all_i CVE-2026-89447In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufd_access_n CVE-2026-894489.3In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the c CVE-2026-89449In the Linux kernel, the following vulnerability has been resolved: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_de CVE-2026-89457.5Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.

CVE-2026-89439: Unscored | Vulnix