In the Linux kernel, the following vulnerability has been resolved:
HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
The EHL (Elkhart Lake) based platforms provide a OOB (Out of band) service, which allows to wakup device when the system is in S5 (Soft-Off state). This OOB service can be enabled/disabled from BIOS settings. When enabled, the ISH device gets PME wake capability. To enable PME wakeup, driver also needs to enable ACPI GPE bit.
On resume, BIOS will clear the wakeup bit. So driver need to re-enable it in resume function to keep the next wakeup capability. But this BIOS clearing of wakeup bit doesn't decrement internal OS GPE reference count, so this reenabling on every resume will cause reference count to overflow.
So first disable and reenable ACPI GPE bit using acpi_disable_gpe().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-nvidia | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-azure-fdeUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-lowlatencyUpgrade linux-nvidiaUpgrade linux-nvidia-6.5Upgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-ibmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-raspiUpgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-6.5Upgrade linux-oracle-6.5Upgrade linux-kvmUpgrade linux-riscvUpgrade linux-xilinx-zynqmpUpgrade linux-starfiveUpgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-gcp-fipsUpgrade linux-ibm-5.15Upgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linux-laptopUpgrade linux-gcpUpgrade linux-gcp-6.5Upgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-gkeopUpgrade linux-nvidia-tegraUpgrade linux-intel-iot-realtimeUpgrade linux-fipsUpgrade linux-oracle-5.15Upgrade linux-hwe-6.5Upgrade linux-awsUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotgUpgrade linux-oem-6.5 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub