In the Linux kernel, the following vulnerability has been resolved:
HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
The EHL (Elkhart Lake) based platforms provide a OOB (Out of band) service, which allows to wakup device when the system is in S5 (Soft-Off state). This OOB service can be enabled/disabled from BIOS settings. When enabled, the ISH device gets PME wake capability. To enable PME wakeup, driver also needs to enable ACPI GPE bit.
On resume, BIOS will clear the wakeup bit. So driver need to re-enable it in resume function to keep the next wakeup capability. But this BIOS clearing of wakeup bit doesn't decrement internal OS GPE reference count, so this reenabling on every resume will cause reference count to overflow.
So first disable and reenable ACPI GPE bit using acpi_disable_gpe().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade kernel-source-azureUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade dtb-armUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-vdso | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-riscvUpgrade linux-lowlatency-hwe-6.5Upgrade linux-starfiveUpgrade linux-lowlatencyUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-azure-fdeUpgrade linux-gkeop-5.15Upgrade linux-azureUpgrade linux-oracle-6.5Upgrade linux-bluefieldUpgrade linux-aws-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-6.5Upgrade linux-aws-5.15Upgrade linux-gcp-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-gkeUpgrade linux-ibm-5.15Upgrade linux-awsUpgrade linux-nvidia-tegraUpgrade linux-oracle-5.15Upgrade linuxUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-6.5Upgrade linux-riscv-5.15Upgrade linux-oem-6.5Upgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-intel-iotgUpgrade linux-hwe-6.5Upgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegra-5.15Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-laptop | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub