In the Linux kernel, the following vulnerability has been resolved:
can: dev: can_set_termination(): allow sleeping GPIOs
In commit 6e86a1543c37 ("can: dev: provide optional GPIO based termination support") GPIO based termination support was added.
For no particular reason that patch uses gpiod_set_value() to set the GPIO. This leads to the following warning, if the systems uses a sleeping GPIO, i.e. behind an I2C port expander:
| WARNING: CPU: 0 PID: 379 at /drivers/gpio/gpiolib.c:3496 gpiod_set_value+0x50/0x6c | CPU: 0 UID: 0 PID: 379 Comm: ip Not tainted 6.11.0-20241016-1 #1 823affae360cc91126e4d316d7a614a8bf86236c
Replace gpiod_set_value() by gpiod_set_value_cansleep() to allow the use of sleeping GPIOs.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-develUpgrade perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Mar 14, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-devel | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-intelUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-awsUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-58-generic-64k | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub