CVE-2026-64512

In CVE-2026-64512, a Linux kernel issue in the ACPI CPPC module stems from field misuse of reg->access_width depending on reg->space_id. When using ACPI_ADR_SPACE_PLATFORM_COMM, access_width indicates the PCC region and can trigger UBSAN shift-out-of-bounds, as illustrated by UBSAN: shift-o...

CVE-2026-64512 ACPI: CPPC: Suppress UBSAN warning caused by field misuse

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg-accesswidth changes depending on the reg-spaceid type. Type ACPIADRSPACEPLATFORMCOMM uses accesswidth to indicate the PCC region, which can result in...

PT-2026-64733

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg-access width changes depending on the reg-space id type. Type ACPI ADR SPACE PLATFORM COMM uses access width to indicate the PCC region, which can...

Linux Distros Unpatched Vulnerability : CVE-2026-64512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg-accesswidth changes depending on the reg-spaceid type. Type...

The vulnerability of the acpi_cppc_processor_probe() function in the drivers/acpi/cppc_acpi.c driver module of the ACPI support driver for the Linux kernel allows a malicious actor to access protected information or cause system failures.

The vulnerability of the acpicppcprocessorprobe function in the drivers/acpi/cppcacpi.c driver module of the ACPI support driver extended configuration and power management interface for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38113)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38113 advisory. - In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990599 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...

EUVD-2025-19830

Malicious code in bioql PyPI...

EUVD-2022-55080

Malicious code in bioql PyPI...

CVE-2025-38113

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...

CVE-2025-38113

CVE-2025-38113 affects the Linux kernel: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used. With nosmp in the kernel command line, CPUs aren’t brought up and their cpc_desc_ptr can be NULL, leading to NULL dereferences when CPU0 iterates over possible CPUs and panics. The issue is docum...

CVE-2025-38113 ACPI: CPPC: Fix NULL pointer dereference when nosmp is used

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...

CVE-2025-38113 ACPI: CPPC: Fix NULL pointer dereference when nosmp is used

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...

UBUNTU-CVE-2022-49145

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may not be present then...

CVE-2022-49145 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may not be present then...

CVE-2022-49145

CVE-2022-49145 affects the Linux kernel's ACPI CPPC parsing of _CPC data. The root cause is an out-of-bounds access when the NumEntries field is less than 2, which could lead to improper access of the Revision element. A fix has been implemented in the kernel to avoid this access. The vulnerabili...

SUSE CVE-2024-50249

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Make rmwlock a rawspinlock The following BUG was triggered: ============================= BUG: Invalid wait context 6.12.0-rc2-XXX 406 Not tainted ----------------------------- kworker/1:1/62 is trying to lock:...

DEBIAN-CVE-2024-50249

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Make rmwlock a rawspinlock The following BUG was triggered: ============================= BUG: Invalid wait context 6.12.0-rc2-XXX 406 Not tainted ----------------------------- kworker/1:1/62 is trying to lock:...

CVE-2024-50249 ACPI: CPPC: Make rmw_lock a raw_spin_lock

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Make rmwlock a rawspinlock The following BUG was triggered: ============================= BUG: Invalid wait context 6.12.0-rc2-XXX 406 Not tainted ----------------------------- kworker/1:1/62 is trying to lock:...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2544)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bpf, skmsg: Fix NULL pointer dereference in skpsockskbingressenqueueCVE-2024-36938 bpf, sockmap: Prevent lock inversion deadlock in map delete...