What is CVE-2024-26823?

CVE-2024-26823 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2024-04-17.

How severe is CVE-2024-26823?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux

CVE-2024-26823

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result, systems such as HIP07 lose their GICv4 functionnality, and some other may even fail to boot, unless they are configured to boot with DT. Move the enabling of quirks into its_probe_one(), making it common to all firmware implementations.

EPSS: 0.002 (14.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 9585a495ac936049dba141e8f9d99159ca06d46a, 6.6, 0
Linux Linux_kernel — versions 6.8

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-26823?: CVE-2024-26823 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2024-04-17.
How severe is CVE-2024-26823?: High severity. CVSS v3 base score is 7.8 out of 10.