CVE-2024-26714

interconnect: qcom: sc8180x: Mark CO0 BCM keepalive

MEDIUM
5.5
CVSS Score
Published: April 3, 2024 at 02:55 PM UTC
Updated: June 17, 2026 at 07:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive The CO0 BCM needs to be up at all times, otherwise some hardware (like the UFS controller) loses its connection to the rest of the SoC, resulting in a hang of the platform, accompanied by a spectacular logspam. Mark it as keepalive to prevent such cases.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.15 ≤ v < 6.1.795.15 ≤ v < 6.6.185.15 ≤ v < 6.7.65.15 ≤ v < 6.86.2 ≤ v < 6.6.186.7 ≤ v < 6.7.66.8 rc16.8 rc26.8 rc36.8 rc49c8c6bac1ae86f6902baa938101902fb3a0a100b
Vendor states this is fixed in 6616d3c4f8284a7b3ef978c916566bd240cea1c7 (fixed)
Vendor states this is fixed in 7a3a70dd08e4b7dffc2f86f2c68fc3812804b9d0 (fixed)
Vendor states this is fixed in 85e985a4f46e462a37f1875cb74ed380e7c0c2e0 (fixed)
Vendor states this is fixed in d8e36ff40cf9dadb135f3a97341c02c9a7afcc43 (fixed)
Vendor states this is fixed in 5.15 (unaffected)
Vendor states this is fixed in 6.1.79 (unaffected)
Vendor states this is fixed in 6.6.18 (unaffected)
Vendor states this is fixed in 6.7.6 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6616d3c4f8284a7b3ef978c916566bd240cea1c7
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7a3a70dd08e4b7dffc2f86f2c68fc3812804b9d0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/85e985a4f46e462a37f1875cb74ed380e7c0c2e0
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d8e36ff40cf9dadb135f3a97341c02c9a7afcc43

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card