kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq()

A flaw was found in the Linux kernel's Operating Performance Points OPP subsystem. A missing index boundary check when querying clock frequencies allows an unprivileged local user to trigger an out-of-bounds read. This flaw can lead to a system crash, resulting in a Denial of Service DoS, or the...

CVE-2026-93069

A flaw was found in the Linux kernel's Optimized Power Management OPP subsystem. An incorrect cleanup ordering during the initialization of internal pointers can lead to a use-after-free error. This occurs when the system attempts to release a reference to an already freed memory region. Such an...

CVE-2026-98363

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: reject DVFS OPP count above MAXDVFSOPPS scpidvfsgetinfo already rejected a zero oppcount, but still trusted any larger value from the SCP firmware. The shared-memory reply only holds MAXDVFSOPPS entries in...

CVE-2026-98363

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: reject DVFS OPP count above MAXDVFSOPPS scpidvfsgetinfo already rejected a zero oppcount, but still trusted any larger value from the SCP firmware. The shared-memory reply only holds MAXDVFSOPPS entries in...

PT-2026-115748

In the Linux kernel, the following vulnerability has been resolved: firmware: arm scpi: reject DVFS OPP count above MAX DVFS OPPS scpi dvfs get info already rejected a zero opp count, but still trusted any larger value from the SCP firmware. The shared-memory reply only holds MAX DVFS OPPS entrie...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsreadfolio to wait on writeback CVE-2026-64058 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs CVE-2026-64068 In the...

SUSE CVE-2026-93069

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

Linux Distros Unpatched Vulnerability : CVE-2026-93069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 OPP: Initialize scope-based pointers inline...

DEBIAN-CVE-2026-93069

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

CVE-2026-93069

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

CVE-2026-93069 OPP: Fix cleanup ordering

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

EUVD-2026-82179

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

CVE-2026-93069

CVE-2026-93069 affects the Linux kernel OPP (Operating Performance Points) subsystem . A prior commit (173e02d67494) changed the initialization order so that *opp_table was initialized after *opp, which reversed the order of registered cleanup functions. This can cause a use-after-free in _opp_kr...

CVE-2026-93069 OPP: Fix cleanup ordering

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix cleanup ordering Commit 173e02d67494 "OPP: Initialize scope-based pointers inline" added initialization for all pointers. In some cases, the ordering was changed so that opptable was initialized after opp. This also...

Malicious code in kilo-opp-project (npm)

The package kilo-opp-project was found to contain malicious code. --- Credit: OpenSSF source...

PT-2026-94710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/msm/dsi component where the use of the dev pm opp set rate0 function removes the vote specified in required-opps without actually parking the clock. This resul...

PT-2026-94867

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Operating Performance Points OPP framework where an incorrect initialization order of pointers leads to an improper sequence of registered cleanup functions...

SUSE CVE-2026-89572

In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup applesoccpufreqinit adds OPP tables from firmware, but some failure paths do not remove them. The driver also uses devpmoppremovealldynamic, which is not the right cleanup helper for OPP...

Linux Distros Unpatched Vulnerability : CVE-2026-89572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup applesoccpufreqinit adds OPP tables from firmware,...

CVE-2026-89572

A flaw was found in the cpufreq apple-soc driver of the Linux kernel. The applesoccpufreqinit function, responsible for adding Operating Performance Point OPP tables from firmware, does not properly remove these tables in certain failure scenarios. This improper cleanup can lead to resource...