Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.1

CVE-2026-72143: Linux kernel may miss power settings after sleep

CVE-2026-72143 · published 2 months ago
Summary

Some versions of the Linux kernel used on Oracle, AWS, and Azure systems do not correctly restore power‑management controls for all hardware sections when the computer wakes from suspend. This can lead to components running with the wrong settings after a resume. Install the updated kernel packages that include the fix to ensure all power domains are properly restored.

What to do
  • Update debian linux to version 7.1.5-1.
  • Update linux kernel to version 7.1.5.
  • Update canonical linux-azure-7.0 to version 7.0.0-1017.17~24.04.1.
  • Update canonical linux-azure-fde-7.0 to version 7.0.0-1016.16~24.04.1.
  • Update canonical linux to version 7.0.0-38.38.
  • Update canonical linux-aws to version 7.0.0-1014.14.
  • Update canonical linux-azure to version 7.0.0-1017.17.
  • Update canonical linux-azure-fde to version 7.0.0-1016.16.
  • Update canonical linux-gcp to version 7.0.0-1014.14.
  • Update canonical linux-gke to version 7.0.0-1008.9.
  • Update canonical linux-ibm to version 7.0.0-1015.15.
  • Update canonical linux-oem-7.0 to version 7.0.0-1015.15.
  • Update canonical linux-oracle to version 7.0.0-1013.13.
  • Update canonical linux-realtime to version 7.0.0-38.38.1.
  • Update canonical linux-aws-7.0 to version 7.0.0-1014.14~24.04.1.
  • Update canonical linux-gcp-7.0 to version 7.0.0-1014.14~24.04.1.
  • Update canonical linux-hwe-7.0 to version 7.0.0-38.38~24.04.4.
  • Update canonical linux-oracle-7.0 to version 7.0.0-1013.13~24.04.1.
  • Update canonical linux-riscv-7.0 to version 7.0.0-38.38.1~24.04.1.
  • Update canonical linux-riscv to version 7.0.0-38.38.1.
  • Update linux linux to version cea03d67db3a880893360bdbb1b0b8d9b33b1799 or later.
Affected software
Ecosystem VendorProductAffected versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Showing 50 of 129. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:24.04:LTS canonical linux-aws-6.14 All versions
Ubuntu:24.04:LTS canonical linux-aws-6.17 All versions
Ubuntu:24.04:LTS canonical linux-aws-7.0 < 7.0.0-1014.14~24.04.1
Fix: upgrade to 7.0.0-1014.14~24.04.1
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.14 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.14 All versions
Ubuntu:24.04:LTS canonical linux-hwe-7.0 < 7.0.0-38.38~24.04.4
Fix: upgrade to 7.0.0-38.38~24.04.4
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-7.0 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle-6.14 All versions
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.17 All versions
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.14 All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.17 All versions
Ubuntu:26.04:LTS canonical linux < 7.0.0-38.38
Fix: upgrade to 7.0.0-38.38
Ubuntu:26.04:LTS canonical linux-aws < 7.0.0-1014.14
Fix: upgrade to 7.0.0-1014.14
Ubuntu:26.04:LTS canonical linux-azure < 7.0.0-1017.17
Fix: upgrade to 7.0.0-1017.17
Ubuntu:26.04:LTS canonical linux-azure-fde < 7.0.0-1016.16
Fix: upgrade to 7.0.0-1016.16
Ubuntu:26.04:LTS canonical linux-gcp < 7.0.0-1014.14
Fix: upgrade to 7.0.0-1014.14
Ubuntu:26.04:LTS canonical linux-gke < 7.0.0-1008.9
Fix: upgrade to 7.0.0-1008.9
Ubuntu:26.04:LTS canonical linux-ibm < 7.0.0-1015.15
Fix: upgrade to 7.0.0-1015.15
Ubuntu:26.04:LTS canonical linux-nvidia All versions
Ubuntu:26.04:LTS canonical linux-nvidia-bos All versions
Ubuntu:26.04:LTS canonical linux-oem-7.0 < 7.0.0-1015.15
Fix: upgrade to 7.0.0-1015.15
Ubuntu:26.04:LTS canonical linux-oracle < 7.0.0-1013.13
Fix: upgrade to 7.0.0-1013.13
Ubuntu:26.04:LTS canonical linux-raspi All versions
Ubuntu:26.04:LTS canonical linux-realtime < 7.0.0-38.38.1
Fix: upgrade to 7.0.0-38.38.1
Ubuntu:26.04:LTS canonical linux-riscv < 7.0.0-38.38.1
Fix: upgrade to 7.0.0-38.38.1
– linux linux < cea03d67db3a880893360bdbb1b0b8d9b33b1799
7.0
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:24.04:LTS canonical linux-azure-7.0 < 7.0.0-1017.17~24.04.1
Fix: upgrade to 7.0.0-1017.17~24.04.1
Ubuntu:24.04:LTS canonical linux-azure-fde-7.0 < 7.0.0-1016.16~24.04.1
Fix: upgrade to 7.0.0-1016.16~24.04.1
Ubuntu:24.04:LTS canonical linux-gcp-7.0 < 7.0.0-1014.14~24.04.1
Fix: upgrade to 7.0.0-1014.14~24.04.1
Ubuntu:24.04:LTS canonical linux-oracle-7.0 < 7.0.0-1013.13~24.04.1
Fix: upgrade to 7.0.0-1013.13~24.04.1
Ubuntu:24.04:LTS canonical linux-riscv-7.0 < 7.0.0-38.38.1~24.04.1
Fix: upgrade to 7.0.0-38.38.1~24.04.1
Debian:14 debian linux < 7.1.5-1
Fix: upgrade to 7.1.5-1
Linux linux kernel >= 6.19.0, < 7.1.5
Fix: upgrade to 7.1.5
Original advisory text
platform/x86: ISST: Restore SST-PP control to all domains
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control values are read and stored for all power domains. Use pd_info->sst_base instead of power_domain_info->sst_base, which only points to power domain 0 base address.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.1 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published15 Aug 2026
Updated28 Oct 2026
First seen15 Aug 2026
Track software like this
Free during beta