CVE-2024-26823

A flaw was found in the Linux kernel's Generic Interrupt Controller (irqchip/gic-v3-its) driver. During initialization on platforms using the Advanced Configuration and Power Interface (ACPI), hardware-specific workaround (quirk) probing is improperly omitted. This issue can cause affected systems to lose critical interrupt functionality or fail to boot entirely, resulting in a denial of service (DoS).

This vulnerability is evaluated as having a Low security impact because it represents an internal hardware initialization failure rather than a remotely or locally exploitable security vulnerability, requiring specific ARM64 hardware running ACPI firmware to trigger. Supported Red Hat Enterprise Linux releases are not affected, as they do not incorporate the refactored interrupt controller code that introduced the regression. On affected upstream installations, the defect is restricted to boot-time misconfiguration or failure without exposing system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.