Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open To avoid symlink-based pidfile clobbering, open the pidfile with ONOFOLLOW and validate it using fstat before locking or writing to it. Currently, the daemon uses a...

SUSE SLES16: cpupower / cpupower-bash-completion / cpupower-bench / etc (SUSE-SU-2026:24362-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24362-1 advisory. This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open...

SUSE SLED15: cpupower / cpupower-bash-completion / cpupower-devel / etc (SUSE-SU-2026:4890-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4890-1 advisory. This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon...

openSUSE 16: cpupower / cpupower-bash-completion / cpupower-bench / etc (openSUSE-SU-2026:22155-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22155-1 advisory. This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes...

Security update for cpupower

This update for cpupower fixes the following issue: CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: Release to latest kernel-source including: intel-speed-select: Harden daemon pidfile open CVE-2026-80663 bsc1278335 cpupower: Fix...

SUSE-SU-2026:4890-1 Security update for cpupower

This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: - Release to latest kernel-source including: intel-speed-select: Harden daemon pidfile open CVE-2026-80663 bsc1278335 cpupower: Fi...

Security update for cpupower (important)

openSUSE security update: security update for cpupower ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22155-1 Rating: important References: bsc1278335 Cross-References: CVE-2026-80663 CVSS scores: CVE-2026-80663 SUSE : 7.1...

Security update for cpupower

This update for cpupower fixes the following issue: CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 turbostat: Fix microcode patch level output for...

Security update for cpupower

This update for cpupower fixes the following issue: CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 turbostat: Fix microcode patch level output for...

OPENSUSE-SU-2026:22155-1 Security update for cpupower

This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: - intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 - turbostat: Fix microcode patch level outp...

SUSE-SU-2026:24362-1 Security update for cpupower

This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: - intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 - turbostat: Fix microcode patch level outp...

SUSE-SU-2026:24408-1 Security update for cpupower

This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: - intel-speed-select: Harden daemon pidfile open git-fixes, bsc1278335, CVE-2026-80663 - turbostat: Fix microcode patch level outp...

Linux kernel daemonize Heap Buffer Overflow DoS

The vulnerability in the daemonize function within the tools/power/x86/intel-speed-select/isst-daemon.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the...

CVE-2026-89438

A flaw was found in the Linux kernel, specifically within the Intel Speed Select Technology ISST component. This vulnerability arises from insufficient validation of input values, such as logical CPU ID and CLOS ID, used in the core power feature. A local attacker could exploit this by providing...

CVE-2026-80663

A flaw was found in the Linux kernel's Intel Speed Select daemon. A local unprivileged user can exploit a symlink vulnerability in the daemon's pidfile handling. By pre-creating a symbolic link at the fixed pidfile path under /tmp, the attacker can cause the root-run daemon instance to write into...

Linux Distros Unpatched Vulnerability : CVE-2026-80663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile...

SUSE CVE-2026-80663

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...

CVE-2026-80663

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...

UBUNTU-CVE-2026-80663

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...

CVE-2026-80663

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...