CVE-2024-26714: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive
In the Linux kernel, the following vulnerability has been resolved:
interconnect: qcom: sc8180x: Mark CO0 BCM keepalive
The CO0 BCM needs to be up at all times, otherwise some hardware (like the UFS controller) loses its connection to the rest of the SoC, resulting in a hang of the platform, accompanied by a spectacular logspam.
Mark it as keepalive to prevent such cases.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Configuration
Mark the CO0 BCM as keepalive so it remains up at all times.
interconnect: qcom: sc8180x CO0 BCM keepalive = enabled
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26714?
CVE-2024-26714 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26714?
To resolve CVE-2024-26714, update your Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
What is the impact of CVE-2024-26714?
CVE-2024-26714 can result in hardware components, like the UFS controller, losing connection to the SoC if the CO0 BCM is not maintained.
Which Linux distributions are affected by CVE-2024-26714?
CVE-2024-26714 affects the Linux kernel in Debian distributions.
Is CVE-2024-26714 being actively exploited?
There is no current indication that CVE-2024-26714 is being actively exploited in the wild.