In the Linux kernel, the following vulnerability has been resolved:
HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
The EHL (Elkhart Lake) based platforms provide a OOB (Out of band) service, which allows to wakup device when the system is in S5 (Soft-Off state). This OOB service can be enabled/disabled from BIOS settings. When enabled, the ISH device gets PME wake capability. To enable PME wakeup, driver also needs to enable ACPI GPE bit.
On resume, BIOS will clear the wakeup bit. So driver need to re-enable it in resume function to keep the next wakeup capability. But this BIOS clearing of wakeup bit doesn't decrement internal OS GPE reference count, so this reenabling on every resume will cause reference count to overflow.
So first disable and reenable ACPI GPE bit using acpi_disable_gpe().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-source-rtUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-default-develUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade dtb-socionextUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-devel-azure | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-gkeopUpgrade linux-riscv-5.15Upgrade linux-hwe-6.5Upgrade linux-awsUpgrade linux-nvidia-tegra-igxUpgrade linux-fipsUpgrade linux-gcp-6.5Upgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iotgUpgrade linux-laptopUpgrade linux-gkeUpgrade linux-ibm-5.15Upgrade linux-oem-6.5Upgrade linux-lowlatency-hwe-6.5Upgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-gkeop-5.15Upgrade linux-riscvUpgrade linux-starfiveUpgrade linux-aws-5.15Upgrade linux-lowlatencyUpgrade linux-nvidia-6.5Upgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.15Upgrade linux-azure-fdeUpgrade linux-azureUpgrade linux-oracle-6.5Upgrade linux-xilinx-zynqmpUpgrade linux-nvidiaUpgrade linux-gcp-5.15Upgrade linux-ibm | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub