CVE-2024-26823

published 2024-04-17

CVE-2024-26823: In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way…

Priority P4 19 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems

While refactoring the way the ITSs are probed, the handling of quirks
applicable to ACPI-based platforms was lost. As a result, systems such as
HIP07 lose their GICv4 functionnality, and some other may even fail to
boot, unless they are configured to boot with DT.

Move the enabling of quirks into its_probe_one(), making it common to all
firmware implementations.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.7.7-1 (forky)	linux 6.7.7-1 (forky)
linux	linux	—	—
linux	linux	>= 9585a495ac936049dba141e8f9d99159ca06d46a < 91a80fff3eeed928b6fba21271f6a9719b22a5d8	91a80fff3eeed928b6fba21271f6a9719b22a5d8
linux	linux	>= 9585a495ac936049dba141e8f9d99159ca06d46a < 4c60c611441f1f1e5de8e00e98ee5a4970778a00	4c60c611441f1f1e5de8e00e98ee5a4970778a00
linux	linux	>= 9585a495ac936049dba141e8f9d99159ca06d46a < 8b02da04ad978827e5ccd675acf170198f747a7a	8b02da04ad978827e5ccd675acf170198f747a7a
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.7.7-1	6.7.7-1
linux	linux_kernel	>= 0 < 6.7.7-1	6.7.7-1
linux	linux_kernel	>= 6.6 < 6.6.18	6.6.18
linux	linux_kernel	>= 6.7 < 6.7.6	6.7.6

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 LOW

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20