Log in Start free

Vulnerability · Published Apr 3, 2024 · Assigned by Linux

CVE-2024-26714interconnect: qcom: sc8180x: Mark CO0 BCM keepalive

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 86.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive The CO0 BCM needs to be up at all times, otherwise some hardware (like the UFS controller) loses its connection to the rest of the SoC, resulting in a hang of the platform, accompanied by a spectacular logspam. Mark it as keepalive to prevent such cases.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.82-1DEBIAN-CVE-2024-26714
Debian:13linux6.7.7-1DEBIAN-CVE-2024-26714
Debian:14linux6.7.7-1DEBIAN-CVE-2024-26714
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1023.23~22.04.1UBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1024.25~22.04.1UBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1024.26~22.04.1UBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-44.44~22.04.1UBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-44.44.1~22.04.1UBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1023.24UBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1027.28UBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1026.26~22.04.1UBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1017.18~22.04.1UBUNTU-CVE-2024-26714
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2024-26714

Affected products (as reported)

VendorProductVersions
Linux Linux 9c8c6bac1ae86f6902baa938101902fb3a0a100b – before 6616d3c4f8284a7b3ef978c916566bd240cea1c79c8c6bac1ae86f6902baa938101902fb3a0a100b – before d8e36ff40cf9dadb135f3a97341c02c9a7afcc439c8c6bac1ae86f6902baa938101902fb3a0a100b – before 7a3a70dd08e4b7dffc2f86f2c68fc3812804b9d09c8c6bac1ae86f6902baa938101902fb3a0a100b – before 85e985a4f46e462a37f1875cb74ed380e7c0c2e0
Linux Linux 5.15

References