CVE-2024-35995 ACPI: CPPC: Use access_width over bit_width for system memory accesses

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Use accesswidth over bitwidth for system memory accesses To align with ACPI 6.3+, since bitwidth can be any 8-bit value, it cannot be depended on to be always on a clean 8b boundary. This was uncovered on the Cobalt 1...

CVE-2024-35995: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Use accesswidth over bitwidth for system memory accesses To align with ACPI 6.3+, since bitwidth can be any 8-bit value, it cannot be depended on to be always on a clean 8b boundary. This was uncovered on the Cobalt 1...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix RELEASELOCKOWNER CVE-2024-26629 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow anonymous set with timeout flag CVE-2024-26642 In the Linux kernel, the...

PT-2024-9050

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a possible null pointer dereference in the cppc cpufreq component of the Linux kernel. This can be caused by the functions cppc cpufreq get rate and hisi cppc...

GSD-2023-1001916 cpufreq: CPPC: Add u64 casts to avoid overflowing

cpufreq: CPPC: Add u64 casts to avoid overflowing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

PT-2023-34992 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to the cpufreq CPPC, where u64 casts are added to avoid overflowing. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

kernel: cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix potential memleak in cppccpufreqcpuinit It's a classic example of memleak, we allocate something, we fail and never free the resources. Make sure we free all resources on policy -init failures...

GSD-2022-1002483 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

ACPI: CPPC: Avoid out of bounds access when parsing CPC data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002412 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

ACPI: CPPC: Avoid out of bounds access when parsing CPC data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1002325 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

ACPI: CPPC: Avoid out of bounds access when parsing CPC data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...

GSD-2022-1002204 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

ACPI: CPPC: Avoid out of bounds access when parsing CPC data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1002023 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

ACPI: CPPC: Avoid out of bounds access when parsing CPC data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001750 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

ACPI: CPPC: Avoid out of bounds access when parsing CPC data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001426 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

ACPI: CPPC: Avoid out of bounds access when parsing CPC data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001100 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

ACPI: CPPC: Avoid out of bounds access when parsing CPC data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30477

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue concerns out of bounds access when parsing CPC data in the ACPI CPPC component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30023

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns out of bounds access when parsing CPC data in the ACPI CPPC component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29699

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns out of bounds access when parsing CPC data in the ACPI CPPC component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29373

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns out of bounds access when parsing CPC data in the ACPI CPPC component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30296

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns out of bounds access when parsing CPC data in the ACPI CPPC component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...