In the Linux kernel, the following vulnerability has been resolved:
Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
When enabling PREEMPT_RT, the gpio_keys_irq_timer() callback runs in hard irq context, but the input_event() takes a spin_lock, which isn't allowed there as it is converted to a rt_spin_lock().
[ 4054.289999] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 4054.290028] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/0 ... [ 4054.290195] __might_resched+0x13c/0x1f4 [ 4054.290209] rt_spin_lock+0x54/0x11c [ 4054.290219] input_event+0x48/0x80 [ 4054.290230] gpio_keys_irq_timer+0x4c/0x78 [ 4054.290243] __hrtimer_run_queues+0x1a4/0x438 [ 4054.290257] hrtimer_interrupt+0xe4/0x240 [ 4054.290269] arch_timer_handler_phys+0x2c/0x44 [ 4054.290283] handle_percpu_devid_irq+0x8c/0x14c [ 4054.290297] handle_irq_desc+0x40/0x58 [ 4054.290307] generic_handle_domain_irq+0x1c/0x28 [ 4054.290316] gic_handle_irq+0x44/0xcc
Considering the gpio_keys_irq_isr() can run in any context, e.g. it can be threaded, it seems there's no point in requesting the timer isr to run in hard irq context.
Relax the hrtimer not to use the hard context.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 11, 2025 | Jul 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Jul 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade dtb-amazonUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade kernel-develUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-rockchip | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinxUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracleUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-realtimeUpgrade linux-image-oracle-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-awsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-fips-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-fipsUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fips | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub