Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: - For MIPS architecture: In mipscpcdefaultphysbase, a refcount leak was fixed. - The function ofnodeput was added to release the refcount incremented by offindcompatiblenode...

CVE-2026-74460

A flaw was found in the Linux kernel's emsusb module. This vulnerability occurs because the emsusbreadbulkcallback function, which processes Controller Area Network CAN Protocol Converter CPC messages from a USB receive buffer, does not properly validate the lengths of these messages. An attacker...

CVE-2026-74460

In the Linux kernel, the following vulnerability has been resolved: can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the...

CVE-2026-74460

The CVE-2026-74460 issue affects the Linux kernel’s ems_usb path for CPC messages. The vulnerability arises in can: ems_usb: validate CPC message lengths, where ems_usb_read_bulk_callback() processes CPC messages in a USB receive buffer. The fix enforces that each declared CPC message fits within...

MINI-PX64-G76C-9CPC

Bulletin has no description...

The vulnerability of the mips_cpc_default_phys_base() function in the arch/mips/kernel/mips-cpc.c module of the Linux operating system’s MIPS architecture support module allows a attacker to cause a service failure.

The vulnerability of the mipscpcdefaultphysbase function in the arch/mips/kernel/mips-cpc.c module of the Linux operating system’s MIPS architecture support module is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990599 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990013 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989665 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988992 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fixed NULL pointer dereferencing when nosmp is used When nosmp is used in the command line, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0’s iteration via foreachpossiblecpu dereferences these NULL...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986417 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986921 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...

EUVD-2024-29364

Malicious code in bioql PyPI...

EUVD-2024-54156

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-49750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the CPC object are unsigned 32-bits values. To avoid overflows while using CPC's values, add 'u6...

AZL-60322 CVE-2022-49750 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the CPC object are unsigned 32-bits values. To avoid overflows while using CPC's values, add 'u64' casts...

CVE-2024-12975

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

CVE-2024-12975

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

CVE-2024-12975

The CVE-2024-12975 entry concerns a buffer overread in the Silicon Labs CPC application when operating in full duplex SPI after receiving an invalid SPI packet. The provided connected sources indicate the issue arises in the CPC/SiLabs stack and has a low CVSS base score (1.0, LOW) with physical ...