Linux · Linux Kernel · CVE-2024-26646
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
The issue is related to the Intel Hardware Feedback Interface (HFI) in the Linux kernel. When resuming from hibernation, the restore kernel allocates a second memory buffer and reprograms the HFI hardware with the new location, which may differ from the one allocated by the image kernel. This can lead to memory corruption if the hardware writes to the invalid buffer. Additionally, the hardware may "forget" the address of the memory buffer when resuming from "deep" suspend, also potentially causing memory corruption.
**Recommendations**
To prevent the described memory corruption, disable HFI when preparing to suspend or hibernate. Enable it when resuming. Add syscore callbacks to handle the package of the boot CPU.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.