In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btnxpuart: Fix kernel panic during FW release
This fixes a kernel panic seen during release FW in a stress test scenario where WLAN and BT FW download occurs simultaneously, and due to a HW bug, chip sends out only 1 bootloader signatures.
When driver receives the bootloader signature, it enters FW download mode, but since no consequtive bootloader signatures seen, FW file is not requested.
After 60 seconds, when FW download times out, release_firmware causes a kernel panic.
[ 2601.949184] Unable to handle kernel paging request at virtual address 0000312e6f006573 [ 2601.992076] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000111802000 [ 2601.992080] [0000312e6f006573] pgd=0000000000000000, p4d=0000000000000000 [ 2601.992087] Internal error: Oops: 0000000096000021 [#1] PREEMPT SMP [ 2601.992091] Modules linked in: algif_hash algif_skcipher af_alg btnxpuart(O) pciexxx(O) mlan(O) overlay fsl_jr_uio caam_jr caamkeyblob_desc caamhash_desc caamalg_desc crypto_engine authenc libdes crct10dif_ce polyval_ce snd_soc_fsl_easrc snd_soc_fsl_asoc_card imx8_media_dev(C) snd_soc_fsl_micfil polyval_generic snd_soc_fsl_xcvr snd_soc_fsl_sai snd_soc_imx_audmux snd_soc_fsl_asrc snd_soc_imx_card snd_soc_imx_hdmi snd_soc_fsl_aud2htx snd_soc_fsl_utils imx_pcm_dma dw_hdmi_cec flexcan can_dev [ 2602.001825] CPU: 2 PID: 20060 Comm: hciconfig Tainted: G C O 6.6.23-lts-next-06236-gb586a521770e #1 [ 2602.010182] Hardware name: NXP i.MX8MPlus EVK board (DT) [ 2602.010185] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2602.010191] pc : _raw_spin_lock+0x34/0x68 [ 2602.010201] lr : free_fw_priv+0x20/0xfc [ 2602.020561] sp : ffff800089363b30 [ 2602.020563] x29: ffff800089363b30 x28: ffff0000d0eb5880 x27: 0000000000000000 [ 2602.020570] x26: 0000000000000000 x25: ffff0000d728b330 x24: 0000000000000000 [ 2602.020577] x23: ffff0000dc856f38 [ 2602.033797] x22: ffff800089363b70 x21: ffff0000dc856000 [ 2602.033802] x20: ff00312e6f006573 x19: ffff0000d0d9ea80 x18: 0000000000000000 [ 2602.033809] x17: 0000000000000000 x16: 0000000000000000 x15: 0000aaaad80dd480 [ 2602.083320] x14: 0000000000000000 x13: 00000000000001b9 x12: 0000000000000002 [ 2602.083326] x11: 0000000000000000 x10: 0000000000000a60 x9 : ffff800089363a30 [ 2602.083333] x8 : ffff0001793d75c0 x7 : ffff0000d6dbc400 x6 : 0000000000000000 [ 2602.083339] x5 : 00000000410fd030 x4 : 0000000000000000 x3 : 0000000000000001 [ 2602.083346] x2 : 0000000000000000 x1 : 0000000000000001 x0 : ff00312e6f006573 [ 2602.083354] Call trace: [ 2602.083356] _raw_spin_lock+0x34/0x68 [ 2602.083364] release_firmware+0x48/0x6c [ 2602.083370] nxp_setup+0x3c4/0x540 [btnxpuart] [ 2602.083383] hci_dev_open_sync+0xf0/0xa34 [ 2602.083391] hci_dev_open+0xd8/0x178 [ 2602.083399] hci_sock_ioctl+0x3b0/0x590 [ 2602.083405] sock_do_ioctl+0x60/0x118 [ 2602.083413] sock_ioctl+0x2f4/0x374 [ 2602.091430] __arm64_sys_ioctl+0xac/0xf0 [ 2602.091437] invoke_syscall+0x48/0x110 [ 2602.091445] el0_svc_common.constprop.0+0xc0/0xe0 [ 2602.091452] do_el0_svc+0x1c/0x28 [ 2602.091457] el0_svc+0x40/0xe4 [ 2602.091465] el0t_64_sync_handler+0x120/0x12c [ 2602.091470] el0t_64_sync+0x190/0x194
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dtb-amdUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescale | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-fipsUpgrade linux-image-gkeopUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azureUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-kvm | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub