CVE-2024-26714

What it actually does

Failure to mark the CO0 BCM as keepalive allows it to power down, severing interconnect paths from hardware such as the UFS controller to the rest of the SoC and producing a platform hang with extensive logging.

Why it matters to the business

Systems using the affected Qualcomm interconnect driver can experience sudden, unrecoverable hangs that interrupt all workloads and require physical intervention or reboot, increasing operational downtime on servers and embedded devices.

How an attack unfolds

An attacker with the ability to trigger interconnect power-state changes (for example through crafted device activity or kernel interfaces) can cause the CO0 BCM to drop, disconnecting critical peripherals and forcing a system-wide hang without needing code execution.

How to fix it

Update the Linux kernel to the commit 6616d3c4f8284a7b3ef978c916566bd240cea1c7 or later stable releases that include the keepalive marking for CO0 BCM on sc8180x.

How to confirm the fix worked

Confirm the presence of the keepalive flag on the CO0 BCM definition in the sc8180x interconnect driver source or verify the running kernel contains commit 6616d3c4f8284a7b3ef978c916566bd240cea1c7; test by exercising UFS and peripheral workloads under power-management stress.

Typical attack path

1. Identify a system running an unpatched Linux kernel with the sc8180x interconnect driver
2. Trigger or wait for conditions that allow the CO0 BCM to enter a low-power state
3. Observe loss of UFS or other peripheral connectivity leading to platform hang

How to detect it

Review kernel logs for repeated interconnect or UFS timeout messages and platform hangs on sc8180x hardware; correlate with power-management events that precede the failure.

What your security team should do

• Prioritize kernel updates on all sc8180x-based systems within the next maintenance window
• Monitor vendor advisories for backported patches in distribution kernels
• Add interconnect-related kernel panics and UFS timeouts to alerting rules until patches are deployed