CVE-2024-26823

CVE-2024-26823

High · published April 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems

While refactoring the way the ITSs are probed, the handling of quirks

applicable to ACPI-based platforms was lost. As a result, systems such as

HIP07 lose their GICv4 functionnality, and some other may even fail to

boot, unless they are configured to boot with DT.

Move the enabling of quirks into its_probe_one(), making it common to all

firmware implementations.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Published
2024-04-17T14:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6, < 6.6.186.6.18
linux/linux_kernel≥ 6.7, < 6.7.66.7.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 17 APR 09:43Z
    irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems
    cvelistv5