Linux Battery Utility Vulnerability Allows Authentication Bypass and System Tampering

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Linux Battery Utility Flaw Enables Authentication Bypass and System Tampering A critical vulnerability in TLP, a Linux battery optimization utility, allows local attackers to bypass authentication controls and alter system power settings. Discovered by security researchers from openSUSE, this flaw affects TLP version 1.9.0 and is tracked as CVE-2025-67859. 3 sources 35