In the Linux kernel, the following vulnerability has been resolved:
HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
The EHL (Elkhart Lake) based platforms provide a OOB (Out of band) service, which allows to wakup device when the system is in S5 (Soft-Off state). This OOB service can be enabled/disabled from BIOS settings. When enabled, the ISH device gets PME wake capability. To enable PME wakeup, driver also needs to enable ACPI GPE bit.
On resume, BIOS will clear the wakeup bit. So driver need to re-enable it in resume function to keep the next wakeup capability. But this BIOS clearing of wakeup bit doesn't decrement internal OS GPE reference count, so this reenabling on every resume will cause reference count to overflow.
So first disable and reenable ACPI GPE bit using acpi_disable_gpe().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-default | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-gcp-6.5Upgrade linux-nvidia-tegraUpgrade linux-gcpUpgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-oracle-5.15Upgrade linux-laptopUpgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-hwe-6.5Upgrade linux-nvidia-tegra-igxUpgrade linux-riscv-5.15Upgrade linux-oem-6.5Upgrade linux-intel-iotgUpgrade linux-gkeUpgrade linux-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-nvidia-6.5Upgrade linux-gkeop-5.15Upgrade linux-aws-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-starfiveUpgrade linux-nvidiaUpgrade linux-riscvUpgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-ibmUpgrade linux-oracle-6.5Upgrade linux-azure-fdeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-bluefieldUpgrade linux-lowlatencyUpgrade linux-realtimeUpgrade linux-lowlatency-hwe-6.5 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub