In the Linux kernel, the following vulnerability has been resolved:
clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
The following bug report happened with a PREEMPT_RT kernel:
BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 2012, name: kwatchdog preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 get_random_u32+0x4f/0x110 clocksource_verify_choose_cpus+0xab/0x1a0 clocksource_verify_percpu.part.0+0x6b/0x330 clocksource_watchdog_kthread+0x193/0x1a0
It is due to the fact that clocksource_verify_choose_cpus() is invoked with preemption disabled. This function invokes get_random_u32() to obtain random numbers for choosing CPUs. The batched_entropy_32 local lock and/or the base_crng.lock spinlock in driver/char/random.c will be acquired during the call. In PREEMPT_RT kernel, they are both sleeping locks and so cannot be acquired in atomic context.
Fix this problem by using migrate_disable() to allow smp_processor_id() to be reliably used without introducing atomic context. preempt_disable() is then called after clocksource_verify_choose_cpus() but before the clocksource measurement is being run to avoid introducing unexpected latency.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.235-227.919Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.179-121.185Upgrade perf-debuginfoUpgrade kernel-tools-devel | Apr 17, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.129-138.220Upgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade perfUpgrade python3-perf-debuginfo | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade dtb-alteraUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-exynos | Mar 13, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-ibmUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gke-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-2028-raspi-realtime | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub