Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-26823

Опубликовано: 17 апр. 2024
Источник: redhat
CVSS3: 4.4
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result, systems such as HIP07 lose their GICv4 functionnality, and some other may even fail to boot, unless they are configured to boot with DT. Move the enabling of quirks into its_probe_one(), making it common to all firmware implementations.

A flaw was found in the Linux kernel's Generic Interrupt Controller (irqchip/gic-v3-its) driver. During initialization on platforms using the Advanced Configuration and Power Interface (ACPI), hardware-specific workaround (quirk) probing is improperly omitted. This issue can cause affected systems to lose critical interrupt functionality or fail to boot entirely, resulting in a denial of service (DoS).

Отчет

This vulnerability is evaluated as having a Low security impact because it represents an internal hardware initialization failure rather than a remotely or locally exploitable security vulnerability, requiring specific ARM64 hardware running ACPI firmware to trigger. Supported Red Hat Enterprise Linux releases are not affected, as they do not incorporate the refactored interrupt controller code that introduced the regression. On affected upstream installations, the defect is restricted to boot-time misconfiguration or failure without exposing system confidentiality or integrity.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=2275611kernel: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems

EPSS

Процентиль: 15%
0.00236
Низкий

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result, systems such as HIP07 lose their GICv4 functionnality, and some other may even fail to boot, unless they are configured to boot with DT. Move the enabling of quirks into its_probe_one(), making it common to all firmware implementations.

CVSS3: 5.5
nvd
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result, systems such as HIP07 lose their GICv4 functionnality, and some other may even fail to boot, unless they are configured to boot with DT. Move the enabling of quirks into its_probe_one(), making it common to all firmware implementations.

CVSS3: 5.5
debian
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: i ...

CVSS3: 5.5
github
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result, systems such as HIP07 lose their GICv4 functionnality, and some other may even fail to boot, unless they are configured to boot with DT. Move the enabling of quirks into its_probe_one(), making it common to all firmware implementations.

CVSS3: 5.5
fstec
больше 2 лет назад

Уязвимость компонента irqchip ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 15%
0.00236
Низкий

4.4 Medium

CVSS3