In the Linux kernel, the following vulnerability has been resolved:
can: dev: can_set_termination(): allow sleeping GPIOs
In commit 6e86a1543c37 ("can: dev: provide optional GPIO based termination support") GPIO based termination support was added.
For no particular reason that patch uses gpiod_set_value() to set the GPIO. This leads to the following warning, if the systems uses a sleeping GPIO, i.e. behind an I2C port expander:
| WARNING: CPU: 0 PID: 379 at /drivers/gpio/gpiolib.c:3496 gpiod_set_value+0x50/0x6c | CPU: 0 UID: 0 PID: 379 Comm: ip Not tainted 6.11.0-20241016-1 #1 823affae360cc91126e4d316d7a614a8bf86236c
Replace gpiod_set_value() by gpiod_set_value_cansleep() to allow the use of sleeping GPIOs.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.176-118.170Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfo | Mar 14, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-tools | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-genericUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-intelUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.11.0-1013-oracle-64k | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub