{"id":"SUSE-SU-2026:24362-1","summary":"Security update for cpupower","details":"This update for cpupower fixes the following issue:\n\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n\nChanges for cpupower:\n\n- intel-speed-select: Harden daemon pidfile open (git-fixes, bsc#1278335, CVE-2026-80663)\n- turbostat: Fix microcode patch level output for AMD/Hygon (git-fixes)\n- cpupower: Reset errno before strtoull() (stable-fixes)\n- intel-speed-select: Fix file descriptor leak in isolate_cpus() (git-fixes)\n- cpupower: Fix incorrect size in cpuidle_state_disable() (stable-fixes)\n- cpupower: fix error return value in cpupower_write_sysfs() (stable-fixes)\n- cpufreq: Fix a bug where the -t option of the set subcommand was not working (stable-fixes)\n- turbostat: Clustered Uncore MHz counters should honor show/hide options (stable-fixes)\n- turbostat: Handle non-root legacy-uncore sysfs permissions (stable-fixes)\n- turbostat: Handle cap_get_proc() ENOSYS (stable-fixes)\n- turbostat: Fix build with musl (stable-fixes)\n- cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (stable-fixes)\n- power turbostat: Fix bogus SysWatt for forked program (git-fixes)\n- cpupower: bench: Prevent NULL dereference on malloc failure (stable-fixes)\n","modified":"2026-10-27T17:23:17.115162399Z","published":"2026-10-22T15:50:58Z","related":["CVE-2026-80663"],"upstream":["CVE-2026-80663"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624362-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1278335"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-80663"}],"affected":[{"package":{"name":"cpupower","ecosystem":"SUSE:Linux Enterprise Server 16.0","purl":"pkg:rpm/suse/cpupower&distro=SUSE%20Linux%20Enterprise%20Server%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.3.1"}]}],"ecosystem_specific":{"binaries":[{"cpupower-bench":"6.12.0-160000.3.1","cpupower-devel":"6.12.0-160000.3.1","cpupower-lang":"6.12.0-160000.3.1","libcpupower1":"6.12.0-160000.3.1","cpupower":"6.12.0-160000.3.1","cpupower-bash-completion":"6.12.0-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24362-1.json"}},{"package":{"name":"cpupower","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","purl":"pkg:rpm/suse/cpupower&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.3.1"}]}],"ecosystem_specific":{"binaries":[{"cpupower-lang":"6.12.0-160000.3.1","libcpupower1":"6.12.0-160000.3.1","cpupower":"6.12.0-160000.3.1","cpupower-bash-completion":"6.12.0-160000.3.1","cpupower-bench":"6.12.0-160000.3.1","cpupower-devel":"6.12.0-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24362-1.json"}}],"schema_version":"1.9.2"}