Get real-time updates on Telegram
CVE-2026-89588: Linux 7.0
CVE-2026-89588. CVSS 3.1 base score 8.4 (HIGH, Source advisory). EPSS 0.00185 (percentile 0.07554), scored 17-Oct-2026.
Affected technology
Linux · 242c652849d979d0133c315a42d9acea0ff88390 to before 5ff385e9403e87ae33f65b8c38698d3b1e92cfde, 136093ba4161e0080088abff48273f6830a47766 to before 452eb28e03015abec6d4bf6488ee567706ade4e1, 87880af2d24e62a84ed19943dbdd524f097172f2 to before b48b613073c3d652cb1823c15d16f7067cf4cee4, 87880af2d24e62a84ed19943dbdd524f097172f2 to before 903308ea40adf0577d82eab69882faf8836326ce, db103b8bd3a4aca69b1b5fe8831a6ed75ac4b3bd, 6.12.75 to before 6.12.109, 6.18.16 to before 6.18.50, 6.19.6 to before 6.20
Linux
Linux · 7.0
Linux
Component: Not specified by the source
File: drivers/acpi/apei/ghes.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 33.6 /100 (P4)
- CVSS 3.1
- 8.4 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00185 · percentile 0.07554 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89588.html