What’s Vulnerable › Vulnerabilities

CVE-2024-26823: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-17 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result, systems such as HIP07 lose their GICv4 functionnality, and some other may even fail to boot, unless they are configured to boot with DT. Move the enabling of quirks into its_probe_one(), making it common to all firmware implementations.

Affected products

• Linux kernel: from 6.6 before 6.6.18; from 6.7 before 6.7.6; 6.8-rc1, 6.8-rc2, 6.8-rc3, 6.8-rc4 — fixed in 6.6.18, 6.7.6

How to fix

Upgrade to a fixed version: Linux kernel 6.6.18, 6.7.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00
• https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a
• https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8
• https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00
• https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a
• https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8

Get alerted when CVE-2024-26823 or the next vulnerability affects your stack