CVE-2024-26823

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-26823", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.180Z", "datePublished": "2024-04-17T09:43:49.850Z", "dateUpdated": "2026-08-05T11:27:38.274Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:27:38.274Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3-its: Restore quirk probing for ACPI-based systems\n\nWhile refactoring the way the ITSs are probed, the handling of quirks\napplicable to ACPI-based platforms was lost. As a result, systems such as\nHIP07 lose their GICv4 functionnality, and some other may even fail to\nboot, unless they are configured to boot with DT.\n\nMove the enabling of quirks into its_probe_one(), making it common to all\nfirmware implementations."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The flaw lives in ARM64 GICv3 ITS irqchip initialization and manifests through local ITS/MSI configuration and device probe; there is no network- or remote-facing input that reaches `its_probe_one()` or `its_create_device()`. Impact requires presence on the affected machine, so the vector is Local.\nAC:L - On any ACPI-booted system the quirk call is unconditionally absent from `gic_acpi_parse_madt_its()`, so every ITS is probed without its errata workarounds every boot \u2014 the defect is fully deterministic, involving no race, no memory-layout dependency, and no condition that must happen to align.\nPR:L - No authentication gate or capability check exists on the path \u2014 the ITS is misprogrammed during boot and the undersized-ITT overrun occurs through ordinary MSI/MSI-X allocation \u2014 but an actor must be locally present on the affected host; there is no unauthenticated remote or anonymous path.\nUI:N - The quirks are skipped automatically during early kernel init on every ACPI boot, and the resulting ITT undersizing and interrupt misdelivery occur during normal device probe with no victim action required.\nS:U - The out-of-bounds ITE writes, the misdirected VMAPP/VMOVP targeting, and the boot failure all occur within the kernel's own security authority; no IOMMU, hypervisor, or sandbox boundary is bypassed.\nC:H - The ITS writes 16-byte ITEs into a heap buffer sized for 8-byte entries, corrupting adjacent kernel objects; such heap corruption of neighboring pointer/length fields is leverageable for kernel memory disclosure, which the guidance scores as High.\nI:H - Losing the QDF2400 E0065 workaround re-introduces documented kernel memory corruption \u2014 the ITS DMA-writes ITEs past the end of the `kzalloc_node()`-allocated ITT into unrelated kernel heap \u2014 and the missing HIP07 `vlpi_redist_offset` makes the ITS target the wrong redistributor page.\nA:H - The commit states affected systems \"may even fail to boot\" and that HIP07 loses GICv4 entirely; combined with lost/misrouted interrupts on multi-socket ThunderX and heap corruption from the undersized ITT, the result is complete system unavailability."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/irqchip/irq-gic-v3-its.c"], "versions": [{"version": "9585a495ac936049dba141e8f9d99159ca06d46a", "lessThan": "91a80fff3eeed928b6fba21271f6a9719b22a5d8", "status": "affected", "versionType": "git"}, {"version": "9585a495ac936049dba141e8f9d99159ca06d46a", "lessThan": "4c60c611441f1f1e5de8e00e98ee5a4970778a00", "status": "affected", "versionType": "git"}, {"version": "9585a495ac936049dba141e8f9d99159ca06d46a", "lessThan": "8b02da04ad978827e5ccd675acf170198f747a7a", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/irqchip/irq-gic-v3-its.c"], "versions": [{"version": "6.6", "status": "affected"}, {"version": "0", "lessThan": "6.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.18", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.6", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.6.18"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.7.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.8"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8"}, {"url": "https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00"}, {"url": "https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a"}], "title": "irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:13.578Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26823", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:49:07.318138Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:33:32.102Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:13.578Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26823", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:49:07.318138Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:17.196Z"}}], "cna": {"title": "irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The flaw lives in ARM64 GICv3 ITS irqchip initialization and manifests through local ITS/MSI configuration and device probe; there is no network- or remote-facing input that reaches `its_probe_one()` or `its_create_device()`. Impact requires presence on the affected machine, so the vector is Local.\nAC:L - On any ACPI-booted system the quirk call is unconditionally absent from `gic_acpi_parse_madt_its()`, so every ITS is probed without its errata workarounds every boot \u2014 the defect is fully deterministic, involving no race, no memory-layout dependency, and no condition that must happen to align.\nPR:L - No authentication gate or capability check exists on the path \u2014 the ITS is misprogrammed during boot and the undersized-ITT overrun occurs through ordinary MSI/MSI-X allocation \u2014 but an actor must be locally present on the affected host; there is no unauthenticated remote or anonymous path.\nUI:N - The quirks are skipped automatically during early kernel init on every ACPI boot, and the resulting ITT undersizing and interrupt misdelivery occur during normal device probe with no victim action required.\nS:U - The out-of-bounds ITE writes, the misdirected VMAPP/VMOVP targeting, and the boot failure all occur within the kernel's own security authority; no IOMMU, hypervisor, or sandbox boundary is bypassed.\nC:H - The ITS writes 16-byte ITEs into a heap buffer sized for 8-byte entries, corrupting adjacent kernel objects; such heap corruption of neighboring pointer/length fields is leverageable for kernel memory disclosure, which the guidance scores as High.\nI:H - Losing the QDF2400 E0065 workaround re-introduces documented kernel memory corruption \u2014 the ITS DMA-writes ITEs past the end of the `kzalloc_node()`-allocated ITT into unrelated kernel heap \u2014 and the missing HIP07 `vlpi_redist_offset` makes the ITS target the wrong redistributor page.\nA:H - The commit states affected systems \"may even fail to boot\" and that HIP07 loses GICv4 entirely; combined with lost/misrouted interrupts on multi-socket ThunderX and heap corruption from the undersized ITT, the result is complete system unavailability."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "9585a495ac936049dba141e8f9d99159ca06d46a", "lessThan": "91a80fff3eeed928b6fba21271f6a9719b22a5d8", "versionType": "git"}, {"status": "affected", "version": "9585a495ac936049dba141e8f9d99159ca06d46a", "lessThan": "4c60c611441f1f1e5de8e00e98ee5a4970778a00", "versionType": "git"}, {"status": "affected", "version": "9585a495ac936049dba141e8f9d99159ca06d46a", "lessThan": "8b02da04ad978827e5ccd675acf170198f747a7a", "versionType": "git"}], "programFiles": ["drivers/irqchip/irq-gic-v3-its.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"status": "unaffected", "version": "0", "lessThan": "6.6", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.18", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.6", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/irqchip/irq-gic-v3-its.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8"}, {"url": "https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00"}, {"url": "https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3-its: Restore quirk probing for ACPI-based systems\n\nWhile refactoring the way the ITSs are probed, the handling of quirks\napplicable to ACPI-based platforms was lost. As a result, systems such as\nHIP07 lose their GICv4 functionnality, and some other may even fail to\nboot, unless they are configured to boot with DT.\n\nMove the enabling of quirks into its_probe_one(), making it common to all\nfirmware implementations."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.18", "versionStartIncluding": "6.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.7.6", "versionStartIncluding": "6.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.8", "versionStartIncluding": "6.6"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:27:38.274Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26823", "state": "PUBLISHED", "dateUpdated": "2026-08-05T11:27:38.274Z", "dateReserved": "2024-02-19T14:20:24.180Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-17T09:43:49.850Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/irqchip/irq-gic-v3-its.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "91a80fff3eeed928b6fba21271f6a9719b22a5d8", "status": "affected", "version": "9585a495ac936049dba141e8f9d99159ca06d46a", "versionType": "git"}, {"lessThan": "4c60c611441f1f1e5de8e00e98ee5a4970778a00", "status": "affected", "version": "9585a495ac936049dba141e8f9d99159ca06d46a", "versionType": "git"}, {"lessThan": "8b02da04ad978827e5ccd675acf170198f747a7a", "status": "affected", "version": "9585a495ac936049dba141e8f9d99159ca06d46a", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/irqchip/irq-gic-v3-its.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"lessThan": "6.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.18", "versionType": "semver"}, {"lessThanOrEqual": "6.7.*", "status": "unaffected", "version": "6.7.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "8ED485BB-BF8B-4D25-809B-B538663EA8D7", "versionEndExcluding": "6.6.18", "versionStartIncluding": "6.6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82", "versionEndExcluding": "6.7.6", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3-its: Restore quirk probing for ACPI-based systems\n\nWhile refactoring the way the ITSs are probed, the handling of quirks\napplicable to ACPI-based platforms was lost. As a result, systems such as\nHIP07 lose their GICv4 functionnality, and some other may even fail to\nboot, unless they are configured to boot with DT.\n\nMove the enabling of quirks into its_probe_one(), making it common to all\nfirmware implementations."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: irqchip/gic-v3-its: restaurar el sondeo de peculiaridades para sistemas basados en ACPI Al refactorizar la forma en que se sondean los ITS, se perdi\u00f3 el manejo de peculiaridades aplicables a plataformas basadas en ACPI. Como resultado, sistemas como HIP07 pierden su funcionalidad GICv4 y es posible que algunos otros incluso no arranquen, a menos que est\u00e9n configurados para arrancar con DT. Mueva la habilitaci\u00f3n de peculiaridades a its_probe_one(), haci\u00e9ndola com\u00fan a todas las implementaciones de firmware."}], "id": "CVE-2024-26823", "lastModified": "2026-08-04T11:17:10.543", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-26823", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-09-10T15:49:07.318138Z", "version": "2.0.3"}}]}, "published": "2024-04-17T10:15:09.027", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4c60c611441f1f1e5de8e00e98ee5a4970778a00"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8b02da04ad978827e5ccd675acf170198f747a7a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/91a80fff3eeed928b6fba21271f6a9719b22a5d8"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems", "id": "2275611", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275611"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-20", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nirqchip/gic-v3-its: Restore quirk probing for ACPI-based systems\nWhile refactoring the way the ITSs are probed, the handling of quirks\napplicable to ACPI-based platforms was lost. As a result, systems such as\nHIP07 lose their GICv4 functionnality, and some other may even fail to\nboot, unless they are configured to boot with DT.\nMove the enabling of quirks into its_probe_one(), making it common to all\nfirmware implementations."], "name": "CVE-2024-26823", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-04-17T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-26823\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-26823\nhttps://lore.kernel.org/linux-cve-announce/2024041702-CVE-2024-26823-0e52@gregkh/T"], "threat_severity": "Low"}

{}