In the Linux kernel, the following vulnerability has been resolved:
HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
The EHL (Elkhart Lake) based platforms provide a OOB (Out of band) service, which allows to wakup device when the system is in S5 (Soft-Off state). This OOB service can be enabled/disabled from BIOS settings. When enabled, the ISH device gets PME wake capability. To enable PME wakeup, driver also needs to enable ACPI GPE bit.
On resume, BIOS will clear the wakeup bit. So driver need to re-enable it in resume function to keep the next wakeup capability. But this BIOS clearing of wakeup bit doesn't decrement internal OS GPE reference count, so this reenabling on every resume will cause reference count to overflow.
So first disable and reenable ACPI GPE bit using acpi_disable_gpe().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-alteraUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-azure | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-gcp-5.15Upgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-azure-fdeUpgrade linux-kvmUpgrade linux-starfiveUpgrade linux-azureUpgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-riscvUpgrade linux-raspiUpgrade linux-oracle-6.5Upgrade linux-lowlatency-hwe-6.5Upgrade linux-nvidia-6.5Upgrade linux-lowlatencyUpgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegraUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-fipsUpgrade linux-gcp-6.5Upgrade linux-gkeUpgrade linux-gkeopUpgrade linux-nvidia-tegra-5.15Upgrade linux-hwe-6.5Upgrade linux-laptopUpgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-oem-6.5Upgrade linux-riscv-5.15Upgrade linuxUpgrade linux-oracle-5.15 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub