SUSE-SU-2026:5123-1: Security update for cpupower
This update for cpupower fixes the following issue:
- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).
Changes for cpupower:
Release to latest kernel-source including these fixes: - intel-speed-select: Harden daemon pidfile open (CVE-2026-80663 bsc#1278335) - turbostat: Increase the limit for fd opened (bsc#1233119). - turbostat: report CoreThr per measurement interval - turbostat: Increase CPUSUBSETMAXCPUS to 8192 (bsc#1241175) - turbostat: Fix trailing '\n' parsing - turbostat: Increase the limit for fd opened - cpupower: Fix incorrect size in cpuidlestatedisable() - cpupower: Add missing powercapsetenabled() stub function - cpupower: fix TSC MHz calculation - cpupower: fix error return value in cpupowerwritesysfs() - cpupower: Fix a bug where the -t option of the set subcommand was not working - cpupower: Fix the snapshot-order of tsc,mperf, clock in mperfstop()
Other sources
This update for cpupower fixes the following issue: CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: Release to latest kernel-source including these fixes: - intel-speed-select: Harden daemon pidfile open (CVE-2026-80663 bsc#1278335) - turbostat: Increase the limit for fd opened (bsc#1233119). - turbostat: report CoreThr per measurement interval - turbostat: Increase CPUSUBSETMAXCPUS to 8192 (bsc#1241175) - turbostat: Fix trailing '\n' parsing - turbostat: Increase the limit for fd opened - cpupower: Fix incorrect size in cpuidlestatedisable() - cpupower: Add missing powercapsetenabled() stub function - cpupower: fix TSC MHz calculation - cpupower: fix error return value in cpupowerwritesysfs() - cpupower: Fix a bug where the -t option of the set subcommand was not working - cpupower: Fix the snapshot-order of tsc,mperf, clock in mperfstop()
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/cpupowerto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/cpupower-debugsourceto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/libcpupower1to a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/libcpupower1-debuginfoto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/cpupower-debuginfoto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/cpupower-develto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/cpupower-langto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/cpupower-bash-completionto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/cpupower-bench-debuginfoto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/cpupower-benchto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade
suse/cpupower-rebuildto a version that resolves this vulnerability.Fixed in 6.4.0-150600.4.10.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2026-5123 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-5123 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-5123