Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cppccpufreq: Fixed a possible null pointer dereferencing issue. The functions cppccpufreqgetrate and hiicppccpufreqgetrate can be called from different locations with various parameters. Therefore, cpufreqcpuget may return null a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppressing UBSAN warnings caused by incorrect field usage The definition of reg-accesswidth changes depending on the reg-spaceid type. The ACPIADRSPACEPLATFORMCOMM type uses accesswidth to indicate the PCC region;...

AZL-93852 CVE-2026-64512 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg-accesswidth changes depending on the reg-spaceid type. Type ACPIADRSPACEPLATFORMCOMM uses accesswidth to indicate the PCC region, which can result in...

CVE-2026-64512

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg-accesswidth changes depending on the reg-spaceid type. Type ACPIADRSPACEPLATFORMCOMM uses accesswidth to indicate the PCC region, which can result in...

CVE-2026-64512

In CVE-2026-64512, a Linux kernel issue in the ACPI CPPC module stems from field misuse of reg->access_width depending on reg->space_id. When using ACPI_ADR_SPACE_PLATFORM_COMM, access_width indicates the PCC region and can trigger UBSAN shift-out-of-bounds, as illustrated by UBSAN: shift-o...

CVE-2026-64512 ACPI: CPPC: Suppress UBSAN warning caused by field misuse

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg-accesswidth changes depending on the reg-spaceid type. Type ACPIADRSPACEPLATFORMCOMM uses accesswidth to indicate the PCC region, which can result in...

CVE-2026-64512: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg-accesswidth changes depending on the reg-spaceid type. Type ACPIADRSPACEPLATFORMCOMM uses accesswidth to indicate the PCC region, which can result in...

PT-2026-64733

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.10-201.fc44.aarch64 Description An issue exists in the ACPI CPPC component where the definition of reg-access width varies based on the reg-space id type. When the type is ACPI ADR SPACE PLATFORM COMM, access...

Linux Distros Unpatched Vulnerability : CVE-2026-64512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg-accesswidth changes depending on the reg-spaceid type. Type...

cppc cpufreq driver Heap Buffer Overflow DoS

The vulnerability of the getperflevelcount and cppcgetcpupower functions in the drivers/cpufreq/cppccpufreq.c driver for scaling kernel frequency in Linux operating systems is related to copying buffers without checking their size a classic buffer overflow attack. Exploiting this vulnerability...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014348 advisory. In the Linux kernel, the following vulnerability has been resolved: cppccpufreq: Fix possible null pointer dereference cppccpufreqgetrate and hisicppccpufreqgetrate...

acpi_cppc_processor_probe Heap Buffer Overflow DoS

The vulnerability of the acpicppcprocessorprobe function in the drivers/acpi/cppcacpi.c driver module of the ACPI support driver extended configuration and power management interface for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38113)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38113 advisory. - In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990599 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...

EUVD-2022-55173

Malicious code in bioql PyPI...

EUVD-2022-55080

Malicious code in bioql PyPI...

EUVD-2025-19830

Malicious code in bioql PyPI...

CVE-2025-38113

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...

CVE-2025-38113 ACPI: CPPC: Fix NULL pointer dereference when nosmp is used

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...

CVE-2025-38113 ACPI: CPPC: Fix NULL pointer dereference when nosmp is used

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...