CVE-2024-26823: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems
While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result, systems such as HIP07 lose their GICv4 functionnality, and some other may even fail to boot, unless they are configured to boot with DT.
Move the enabling of quirks into itsprobeone(), making it common to all firmware implementations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.7.7-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Configuration
Configure the system to boot with DT to preserve GICv4 functionality and avoid boot failure.
Affected systems such as HIP07 boot firmware/device-tree mode = DT
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26823?
CVE-2024-26823 has been classified based on the impact on the Linux kernel, particularly concerning ACPI-based systems.
How do I fix CVE-2024-26823?
To address CVE-2024-26823, it is recommended to upgrade the Linux kernel to a version that includes the security fix.
What software versions are affected by CVE-2024-26823?
CVE-2024-26823 affects Linux kernel versions from 6.6 up to but not including 6.9.
What systems are impacted by CVE-2024-26823?
CVE-2024-26823 primarily impacts ACPI-based platforms that utilize the Linux kernel.
Is CVE-2024-26823 exploitable?
Yes, CVE-2024-26823 may be exploitable under certain conditions on vulnerable systems using the affected Linux kernel versions.