CVE-2023-52519

Summary

CVE-2023-52519 is a vulnerability affecting the Linux kernel's intel-ish-hid driver. This issue lies in the way the driver handles the ACPI GPE bit during system resumes. On certain EHL (Elkhart Lake) based platforms, the BIOS clears the wakeup bit upon resumption from S5 state, requiring the driver to re-enable it for the next wakeup capability. However, this action does not decrement the OS GPE reference count, leading to an overflow and potential security implications. To mitigate this issue, the vulnerability has been resolved by disabling and re-enabling the ACPI GPE bit using acpi_disable_gpe().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.