CVE-2026-74460

The CVE-2026-74460 issue affects the Linux kernel’s ems_usb path for CPC messages. The vulnerability arises in can: ems_usb: validate CPC message lengths, where ems_usb_read_bulk_callback() processes CPC messages in a USB receive buffer. The fix enforces that each declared CPC message fits within...

MINI-PX64-G76C-9CPC

Bulletin has no description...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: - For MIPS architecture: In mipscpcdefaultphysbase, a refcount leak was fixed. - The function ofnodeput was added to release the refcount incremented by offindcompatiblenode...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990599 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989665 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990013 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988992 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fixed NULL pointer dereferencing when nosmp is used When nosmp is used in the command line, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0’s iteration via foreachpossiblecpu dereferences these NULL...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986921 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986417 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...

EUVD-2024-29364

Malicious code in bioql PyPI...

EUVD-2024-54156

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-49750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the CPC object are unsigned 32-bits values. To avoid overflows while using CPC's values, add 'u6...

AZL-60322 CVE-2022-49750 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the CPC object are unsigned 32-bits values. To avoid overflows while using CPC's values, add 'u64' casts...

CVE-2024-12975

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

CVE-2024-12975

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

CVE-2024-12975

The CVE-2024-12975 entry concerns a buffer overread in the Silicon Labs CPC application when operating in full duplex SPI after receiving an invalid SPI packet. The provided connected sources indicate the issue arises in the CPC/SiLabs stack and has a low CVSS base score (1.0, LOW) with physical ...

CVE-2024-12975 Silicon Labs CPC can leak information in full duplex SPI

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

SUSE CVE-2022-49324

In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the refcount incremented by offindcompatiblenode...

DEBIAN-CVE-2022-49324

In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the refcount incremented by offindcompatiblenode...