SUSE-SU-2026:24362-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2026/suse-su-202624362-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24362-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2026:24362-1

Upstream

CVE-2026-80663

Related

CVE-2026-80663

Published

2026-10-22T15:50:58Z

Modified

2026-10-27T17:23:17Z

Summary

Security update for cpupower

Details

This update for cpupower fixes the following issue:

CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).

Changes for cpupower:

intel-speed-select: Harden daemon pidfile open (git-fixes, bsc#1278335, CVE-2026-80663)
turbostat: Fix microcode patch level output for AMD/Hygon (git-fixes)
cpupower: Reset errno before strtoull() (stable-fixes)
intel-speed-select: Fix file descriptor leak in isolate_cpus() (git-fixes)
cpupower: Fix incorrect size in cpuidle_state_disable() (stable-fixes)
cpupower: fix error return value in cpupower_write_sysfs() (stable-fixes)
cpufreq: Fix a bug where the -t option of the set subcommand was not working (stable-fixes)
turbostat: Clustered Uncore MHz counters should honor show/hide options (stable-fixes)
turbostat: Handle non-root legacy-uncore sysfs permissions (stable-fixes)
turbostat: Handle cap_get_proc() ENOSYS (stable-fixes)
turbostat: Fix build with musl (stable-fixes)
cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (stable-fixes)
power turbostat: Fix bogus SysWatt for forked program (git-fixes)
cpupower: bench: Prevent NULL dereference on malloc failure (stable-fixes)

References

Affected packages

SUSE:Linux Enterprise Server 16.0 / cpupower

Package

Name: cpupower
Purl: pkg:rpm/suse/cpupower&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.12.0-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cpupower":  "6.12.0-160000.3.1",
            "cpupower-bash-completion":  "6.12.0-160000.3.1",
            "cpupower-bench":  "6.12.0-160000.3.1",
            "cpupower-devel":  "6.12.0-160000.3.1",
            "cpupower-lang":  "6.12.0-160000.3.1",
            "libcpupower1":  "6.12.0-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24362-1.json"

SUSE:Linux Enterprise Server for SAP applications 16.0 / cpupower

Package

Name: cpupower
Purl: pkg:rpm/suse/cpupower&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.12.0-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "cpupower":  "6.12.0-160000.3.1",
            "cpupower-bash-completion":  "6.12.0-160000.3.1",
            "cpupower-bench":  "6.12.0-160000.3.1",
            "cpupower-devel":  "6.12.0-160000.3.1",
            "cpupower-lang":  "6.12.0-160000.3.1",
            "libcpupower1":  "6.12.0-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24362-1.json"