CVE-2026-64377

In the Linux kernel, the cpufreq: qcom-cpufreq-hw driver has a double-free fix. qcom_cpufreq.data is allocated with devm_kzalloc() as a per-domain array, and qcom_cpufreq_hw_cpu_init() stores a pointer to an element in policy->driver_data. The driver’s exit path previously invoked kfree() on p...

EUVD-2026-48917

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreqsuspend is called via the kernelrestart - deviceshutdown path. Unlike the normal system suspend path, the reboot path does not call freezeprocesses, so...

CVE-2026-64373

The issue CVE-2026-64373 affects the Linux kernel cpufreq subsystem. During system reboot, cpufreq_suspend() is invoked via kernel_restart() where freeze_processes() is not called, allowing CPU hotplug to run concurrently and potentially free governor_data while cpufreq_suspend() accesses it. Thi...

CVE-2026-64373

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreqsuspend is called via the kernelrestart - deviceshutdown path. Unlike the normal system suspend path, the reboot path does not call freezeprocesses, so...

CVE-2026-64372 cpufreq: pcc: fix use-after-free and double free in _OSC evaluation

In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the two calls it freed output.pointer but left output.length unchanged...

CVE-2026-64372

Summary: CVE-2026-64372 affects the Linux kernel cpufreq/pcc OSC evaluation path. The defect arises in pcc_cpufreq_do_osc(), which calls acpi_evaluate_object() twice for the two‑phase _OSC negotiation. Between the calls, output.pointer is freed while output.length remains, causing the second call...

Linux Distros Unpatched Vulnerability : CVE-2026-64377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: qcom-cpufreq-hw: Fix possible double free qcomcpufreq.data is allocated with devmkzalloc in probe as an array of per-domain data. qcomcpufreqhwcpuinit...

Linux Distros Unpatched Vulnerability : CVE-2026-64372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the...

PT-2026-64593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free and double free issue exists in the pcc cpufreq do osc function during the two-phase OSC negotiation. The function calls acpi evaluate object twice; however, after the...

PT-2026-64594

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreq suspend is called via the kernel restart - device shutdown path. Unlike the normal system suspend path, the reboot path does not call freeze processes,...

Linux Distros Unpatched Vulnerability : CVE-2026-64373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: Fix hotplug-suspend race during reboot During system reboot, cpufreqsuspend is called via the kernelrestart - deviceshutdown path. Unlike the normal...

The vulnerability of the qcom_cpufreq_krait_name_version() function in the drivers/cpufreq/qcom-cpufreq-nvmem.c file, a frequency scaling driver for the Linux kernel, allows a hacker to cause a system failure.

The vulnerability of the qcomcpufreqkraitnameversion function in the drivers/cpufreq/qcom-cpufreq-nvmem.c frequency scaling driver for Linux operating systems is related to the absence of references to an active, allocated resource. Exploiting this vulnerability could allow an attacker to trigger...

The vulnerability of the functions get_perf_level_count() and cppc_get_cpu_power() in the driver/cpufreq/cppc_cpufreq.c module, a frequency scaling driver for Linux processors, allows a hacker to trigger a service failure.

The vulnerability of the getperflevelcount and cppcgetcpupower functions in the drivers/cpufreq/cppccpufreq.c driver for scaling kernel frequency in Linux operating systems is related to copying buffers without checking their size a classic buffer overflow attack. Exploiting this vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-53019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: spacemit: ccumix: fix inverted condition in ccumixtriggerfc Fix inverted condition that skips frequency change trigger, causing kernel panics during cpufre...

CVE-2026-53019

In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: ccumix: fix inverted condition in ccumixtriggerfc Fix inverted condition that skips frequency change trigger, causing kernel panics during cpufreq scaling...

CVE-2026-53019 clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc()

In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: ccumix: fix inverted condition in ccumixtriggerfc Fix inverted condition that skips frequency change trigger, causing kernel panics during cpufreq scaling...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handled NULL policy in longhaulexit The longhaulexit function was calling cpufreqcpuget0 without checking for a NULL policy pointer. On some systems, this could lead to a NULL derefrence and a kernel warning or...

CLSA-2026-1779434490 kernel: Fix of 100 CVEs

tracing: Verify event formats that have "%p.." CVE-2025-37938 - HID: pidff: Fix null pointer dereference in pidfffindfields CVE-2025-37862 - scsi: st: Fix array overflow in stsetup CVE-2025-37857 - drm/amdkfd: debugfs hanghws skip GPU with MES CVE-2025-37853 - mm/vmscan: don't try to reclaim...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: A crash occurred during the disabling of turbo mode. When the system is booted with the kernel command line arguments “nosmt” or “maxcpus” to limit the number of CPUs, disabling turbo mode by executing: echo...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: A NULL pointer dereference occurred in the updatecpuqosrequest function. The updatecpuqosrequest function attempts to initialize the freq variable by dereferencing cpudata before verifying whether the policy...